Amazon Linux 2022 : util-linux (ALAS2022-2022-218)

The version of util-linux installed on the remote host is prior to 2.37.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-218 advisory. - A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to...

Amazon Linux 2022 : git (ALAS2022-2022-236)

The version of git installed on the remote host is prior to 2.37.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-236 advisory. - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on...

Amazon Linux AMI : expat (ALAS-2022-1655)

The version of expat installed on the remote host is prior to 2.1.0-15.33. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1655 advisory. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in...

Amazon Linux 2022 : samba (ALAS2022-2022-224)

The version of samba installed on the remote host is prior to 4.16.2-0. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-224 advisory. - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the...

Amazon Linux 2022 : python-waitress (ALAS2022-2022-235)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-235 advisory. - Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the...

Amazon Linux AMI : libtiff (ALAS-2022-1647)

The version of libtiff installed on the remote host is prior to 4.0.3-35.40. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1647 advisory. A flaw was found in libtiffs tiffcrop utility that has a uint32t underflow that can lead to an out-of- bounds read and write. Th...

Amazon Linux AMI : python36 (ALAS-2022-1652)

The version of python36 installed on the remote host is prior to 3.6.12-1.23. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1652 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...

Amazon Linux AMI : python38 (ALAS-2022-1651)

The version of python38 installed on the remote host is prior to 3.8.5-1.6. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1651 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...

Amazon Linux AMI : git (ALAS-2022-1653)

The version of git installed on the remote host is prior to 2.38.1-1.77. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1653 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5,...

Amazon Linux 2022 : mariadb105 (ALAS2022-2022-245)

The version of mariadb105 installed on the remote host is prior to 10.5.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-245 advisory. - MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at...

Amazon Linux 2022 : dnsmasq (ALAS2022-2022-227)

The version of dnsmasq installed on the remote host is prior to 2.86-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-227 advisory. - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted...

Amazon Linux 2022 : wireshark (ALAS2022-2022-226)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-226 advisory. - NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file CVE-2021-39920 - NULL pointer exception in the...

Amazon Linux 2022 : xmlsec1 (ALAS2022-2022-257)

The version of xmlsec1 installed on the remote host is prior to 1.2.33-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-257 advisory. - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE...

Amazon Linux 2022 : expat (ALAS2022-2022-259)

The version of expat installed on the remote host is prior to 2.4.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-259 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not teste...

Amazon Linux 2022 : docker (ALAS2022-2022-237)

The version of docker installed on the remote host is prior to 20.10.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-237 advisory. - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby...

Amazon Linux 2022 : libksba (ALAS2022-2022-249)

The version of libksba installed on the remote host is prior to 1.6.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-249 advisory. - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be...

Amazon Linux 2022 : expat (ALAS2022-2022-261)

The version of expat installed on the remote host is prior to 2.5.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-261 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in...

Amazon Linux 2022 : libldb (ALAS2022-2022-247)

The version of libldb installed on the remote host is prior to 2.5.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-247 advisory. - A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a...

Amazon Linux 2022 : protobuf-c (ALAS2022-2022-248)

The version of protobuf-c installed on the remote host is prior to 1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-248 advisory. - Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in...

Amazon Linux 2022 : vim (ALAS2022-2022-251)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-251 advisory. - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to...