vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

slot2

slot2 slot2: a two-stage UEFI GRUB2 bootkit that persists a pre-OS networked implant on Amazon Linux 2023 on AWS EC2 UEFI x8664. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Summary slot2 is a bootkit for Amazon Linux 2023 on EC2. The AWS EC2 UEFI firmware load...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3336)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3336 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown CVE-2026-68161 In the Linux kernel, the following vulnerability has bee...

Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3337)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3337 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

Amazon Linux 2 : ca-certificates (ALAS-2026-4045)

The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4045 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included...

Amazon Linux Unpatched Vulnerability : CVE-2026-109618

The remote Amazon Linux host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for...

Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3306)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3306 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL...

Amazon Linux 2 : ecs-init (ALASECS-2026-149)

The version of ecs-init installed on the remote host is prior to 1.108.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-149 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer m...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-3274)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3274 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global...

Amazon Linux 2023 : oci-add-hooks (ALAS2023-2026-3272)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3272 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...

Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-3228)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3228 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map,...

Amazon Linux 2023 : ecs-init (ALAS2023-2026-3321)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3321 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each ent...

Amazon Linux 2023 : docker (ALAS2023-2026-3266)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3266 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. A...

Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-3229)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3229 advisory. When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2026-3260)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3260 advisory. CheckSetDoodad in xkb/xkb.c frees doodad-text.text on error but doesnot NULL the pointer. When the error path continues, XkbClearDoodad iscalled during cleanup and frees the same pointer again...

Amazon Linux 2023 : python3.13-tornado (ALAS2023-2026-3293)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3293 advisory. Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response...