Amazon Linux AMI : openldap (ALAS-2022-1586)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1586 advisory. In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an...

Amazon Linux 2 : openldap (ALAS-2022-1796)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1796 advisory. In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an...

Amazon Linux 2 : xmlrpc-c (ALAS-2022-1795)

The version of xmlrpc-c installed on the remote host is prior to 1.32.5-1905.svn2451. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1795 advisory. A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XM...

Critical: xmlrpc-c

Issue Overview: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

Amazon Linux AMI : xmlrpc-c (ALAS-2022-1585)

The version of xmlrpc-c installed on the remote host is prior to 1.22.04-r1934.7. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1585 advisory. A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-023 (ALASKERNEL-5.4-2022-023)

The version of kernel installed on the remote host is prior to 5.4.181-99.354. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-023 advisory. AMD recommends using a software mitigation for this issue, which the kernel is enabling by default. The Lin...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2022-016)

The version of containerd installed on the remote host is prior to 1.4.6-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2022-016 advisory. containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug wa...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2022-017)

The version of docker installed on the remote host is prior to 20.10.7-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2022-017 advisory. A file permissions vulnerability was found in Moby Docker Engine. Copying files by using docker cp into a...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2022-015)

The version of containerd installed on the remote host is prior to 1.4.6-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2022-015 advisory. A bug was found in containerd where containers launched through containerd's CRI implementation with a...

Amazon Linux 2 : aws-nitro-enclaves-acm (ALASNITRO-ENCLAVES-2022-018)

The version of aws-nitro-enclaves-acm installed on the remote host is prior to 1.1.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2022-018 advisory. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop...

Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2021-001)

The version of java-11-openjdk installed on the remote host is prior to 11.0.13.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2JAVA-OPENJDK11-2021-001 advisory. No versions of an Amazon Linux Java Virtual Machine JVM are affected by CVE-2021-44228 or...

Critical: maven-shared-utils

Issue Overview: org.apache.maven.shared:maven-shared-utils is a functional replacement for plexus-utils in Maven. Affected versions of this package are vulnerable to Command Injection. The Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

Amazon Linux 2 : maven-shared-utils (ALAS-2022-1794)

The version of maven-shared-utils installed on the remote host is prior to 0.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1794 advisory. org.apache.maven.shared:maven-shared-utils is a functional replacement for plexus-utils in Maven. Affected versions of thi...

Amazon Linux 2 : curl (ALAS-2022-1792)

The version of curl installed on the remote host is prior to 7.79.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1792 advisory. A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly...

Amazon Linux 2 : kernel (ALAS-2022-1793)

The version of kernel installed on the remote host is prior to 4.14.276-211.499. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1793 advisory. 2024-02-01: CVE-2022-41858 was added to this advisory. A use-after-free flaw was found in the Linux kernel's FUSE...

Amazon Linux 2 : docker, containerd (ALASDOCKER-2022-018)

The version of containerd installed on the remote host is prior to 1.4.13-2. The version of docker installed on the remote host is prior to 20.10.13-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2022-018 advisory. A flaw was found in Moby Docker Engine, where...

Amazon Linux 2 : docker (ALASDOCKER-2022-017)

The version of docker installed on the remote host is prior to 20.10.7-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2022-017 advisory. A file permissions vulnerability was found in Moby Docker Engine. Copying files by using docker cp into a...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-002)

The version of kernel installed on the remote host is prior to 5.4.110-54.182. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-002 advisory. 2024-09-12: CVE-2021-4442 was added to this advisory. An issue was discovered in the Linux kernel...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-009)

The version of kernel installed on the remote host is prior to 5.10.93-87.444. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-009 advisory. A denial of service flaw for virtual machine guests in the Linux kernel's Xen hypervisor subsystem was fou...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-010)

The version of kernel installed on the remote host is prior to 5.10.96-90.460. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-010 advisory. 2024-12-05: CVE-2022-48757 was added to this advisory. 2024-08-01: CVE-2022-48760 was added to this...