Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-008)

The version of kernel installed on the remote host is prior to 5.4.144-69.257. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-008 advisory. A flaw was found in the Linux kernel. When reusing a socket with an attached dccpshctxccid as a listener, t...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)

The version of kernel installed on the remote host is prior to 5.10.47-39.130. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-002 advisory. A flaw was found in the Linux kernels implementation of wifi fragmentation handling. An attacker with the...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-022)

The version of kernel installed on the remote host is prior to 5.4.176-91.338. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-022 advisory. 2024-12-05: CVE-2022-48757 was added to this advisory. 2024-08-01: CVE-2022-48760 was added to this advisor...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-007)

The version of kernel installed on the remote host is prior to 5.4.144-69.257. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-007 advisory. A race problem was seen in the vtkioctl in drivers/tty/vt/vtioctl.c in the Linux kernel, which may cause an...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-011)

The version of kernel installed on the remote host is prior to 5.4.38-17.76. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-011 advisory. In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-007)

The version of kernel installed on the remote host is prior to 5.10.75-79.358. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-007 advisory. A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users ...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-003)

The version of kernel installed on the remote host is prior to 5.4.117-58.216. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-003 advisory. 2024-05-23: CVE-2021-46974 was added to this advisory. 2024-05-23: CVE-2021-46909 was added to this advisor...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-013 (ALASKERNEL-5.10-2022-013)

The version of kernel installed on the remote host is prior to 5.10.109-104.500. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-013 advisory. A use-after-free flaw was found in the Linux kernel's sound subsystem in the way a user triggers...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-015)

The version of kernel installed on the remote host is prior to 5.4.58-32.125. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2022-015 advisory. A flaw was found in the Linux kernel. Memory corruption can be exploited to gain root privileges from unprivileged...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-014)

The version of kernel installed on the remote host is prior to 5.4.58-27.104. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-014 advisory. A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-001)

The version of kernel installed on the remote host is prior to 5.10.35-31.135. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-001 advisory. 2024-05-23: CVE-2021-46972 was added to this advisory. 2024-05-23: CVE-2021-46974 was added to this...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-016)

The version of kernel installed on the remote host is prior to 5.4.68-34.125. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-016 advisory. A flaw was found in the Linux kernel's implementation of BTRFS free space management, where the kernel does...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-019)

The version of kernel installed on the remote host is prior to 5.4.91-41.139. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-019 advisory. A flaw was found in the JFS filesystem code. This flaw allows a local attacker with the ability to set...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-003)

The version of kernel installed on the remote host is prior to 5.10.50-44.132. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.10-2022-003 advisory. An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a loc...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2021-001)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0312.b07-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2021-001 advisory. No versions of an Amazon Linux Java Virtual Machine JVM are affected by CVE-2021-44228 o...

Amazon Linux AMI : golang (ALAS-2022-1583)

The version of golang installed on the remote host is prior to 1.16.15-1.37. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1583 advisory. 2024-01-03: CVE-2021-27919 was added to this advisory. An out of bounds read vulnerability was found in golang. When...

Amazon Linux AMI : httpd24 (ALAS-2022-1584)

The version of httpd24 installed on the remote host is prior to 2.4.53-1.96. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1584 advisory. A flaw was found in the modlua module of httpd. A crafted request body can cause a read to a random memory area due to ...

Amazon Linux AMI : containerd, docker (ALAS-2022-1582)

The version of containerd installed on the remote host is prior to 1.4.13-2.1. The version of docker installed on the remote host is prior to 20.10.13-2.1. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1582 advisory. A flaw was found in Moby Docker Engine, where...

Amazon Linux 2 : docker, containerd (ALAS-2022-018) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. Deprecated by al2ALASDOCKER-2022-018.nasl plugin ID 160412 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALAS-2022-002) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. It has been replaced by al2ALASCORRETTO8-2022-002.nasl plugin ID 160405. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...