Amazon Linux 2023 : cuda-opencl-13, cuda-opencl-devel-13 (ALAS2023NVIDIA-2025-169)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-169 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...

Amazon Linux 2 : amazon-ecr-credential-helper, --advisory ALAS2NITRO-ENCLAVES-2025-071 (ALASNITRO-ENCLAVES-2025-071)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.10.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2025-071 advisory. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potential...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2025-1214)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1214 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which a...

Amazon Linux 2023 : cuda (ALAS2023NVIDIA-2025-162)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-162 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...

Amazon Linux 2023 : cuda-demo-suite-12 (ALAS2023NVIDIA-2025-229)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-229 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2023 : cuda-13 (ALAS2023NVIDIA-2025-194)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-194 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1212)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1212 advisory. A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in...

Amazon Linux 2023 : libcublas-12, libcublas-devel-12 (ALAS2023NVIDIA-2025-204)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-204 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2 : postgresql, --advisory ALAS2-2025-3035 (ALAS-2025-3035)

The version of postgresql installed on the remote host is prior to 9.2.24-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3035 advisory. Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for...

Amazon Linux 2023 : libcurand-13, libcurand-devel-13 (ALAS2023NVIDIA-2025-156)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-156 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1224 advisory. go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Tenable has extracted the preceding description block directly from the tested product...

Amazon Linux 2023 : libnpp-12, libnpp-devel-12 (ALAS2023NVIDIA-2025-200)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-200 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2 : open-vm-tools, --advisory ALAS2-2025-3036 (ALAS-2025-3036)

The version of open-vm-tools installed on the remote host is prior to 12.3.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3036 advisory. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with...

Amazon Linux 2023 : cuda-nvprof-12 (ALAS2023NVIDIA-2025-218)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-218 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2023 : libnpp-13, libnpp-devel-13 (ALAS2023NVIDIA-2025-153)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-153 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successfu...

Amazon Linux 2023 : libcusparse-12, libcusparse-devel-12 (ALAS2023NVIDIA-2025-201)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-201 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...

Amazon Linux 2023 : open-vm-tools, open-vm-tools-desktop, open-vm-tools-devel (ALAS2023-2025-1226)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1226 advisory. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed...

Amazon Linux 2 : polkit, --advisory ALAS2-2025-3024 (ALAS-2025-3024)

The version of polkit installed on the remote host is prior to 0.112-26. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3024 advisory. A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

Amazon Linux 2 : squid, --advisory ALAS2-2025-3027 (ALAS-2025-3027)

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3027 advisory. Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. CVE-2025-59362...

Amazon Linux 2023 : cuda-visual-tools-12 (ALAS2023NVIDIA-2025-206)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-206 advisory. NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to...