Amazon Linux 2022 : sysstat (ALAS2022-2022-255)

The version of sysstat installed on the remote host is prior to 12.5.6-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-255 advisory. - sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and newer b...

Amazon Linux 2022 : rsyslog (ALAS2022-2022-211)

The version of rsyslog installed on the remote host is prior to 8.2204.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-211 advisory. - rsyslog before 7.6.6 and 8.x before 8.4.1 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of...

Amazon Linux 2022 : nodejs (ALAS2022-2022-214)

The version of nodejs installed on the remote host is prior to 18.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-214 advisory. - The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP...

Amazon Linux 2022 : curl (ALAS2022-2022-246)

The version of curl installed on the remote host is prior to 7.86.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-246 advisory. - When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send,...

Amazon Linux 2022 : xorg-x11-server (ALAS2022-2022-250)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-250 advisory. - A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer...

Important: kernel-livepatch-4.14.290-217.505

Issue Overview: A use-after-free flaw was found in route4change in the net/sched/clsroute.c filter implementation in the Linux kernel. This flaw allows a local user to crash the system and possibly lead to a local privilege escalation problem. CVE-2022-2588 Affected Packages:...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2022-011 (ALASKERNEL-5.15-2022-011)

The version of kernel installed on the remote host is prior to 5.15.79-51.138. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2022-011 advisory. A vulnerability classified as problematic has been found in Linux Kernel. This affects the function...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-023 (ALASKERNEL-5.10-2022-023)

The version of kernel installed on the remote host is prior to 5.10.155-138.670. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-023 advisory. A memory overflow vulnerability was found in the Linux kernel's ipc functionality of the memcg subsystem...

Amazon Linux 2 : expat (ALAS-2022-1885)

The version of expat installed on the remote host is prior to 2.1.0-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1885 advisory. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreat...

Amazon Linux 2 : util-linux (ALAS-2022-1878)

The version of util-linux installed on the remote host is prior to 2.30.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1878 advisory. A command injection flaw was found in the way util-linux implements umount autocompletion in Bash. An attacker with the ability...

Amazon Linux 2 : curl (ALAS-2022-1882)

The version of curl installed on the remote host is prior to 7.79.1-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1882 advisory. A vulnerability was found in curl. The issue occurs when doing HTTPS transfers, where curl might erroneously use the read...

Amazon Linux 2 : thunderbird (ALAS-2022-1900)

The version of thunderbird installed on the remote host is prior to 102.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1900 advisory. 2024-05-09: CVE-2021-28429 was added to this advisory. Integer overflow vulnerability in avtimecodemakestring in...

Amazon Linux 2 : util-linux (ALAS-2022-1901)

The version of util-linux installed on the remote host is prior to 2.30.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1901 advisory. A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline...

Amazon Linux 2 : libksba (ALAS-2022-1890)

The version of libksba installed on the remote host is prior to 1.3.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1890 advisory. A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploit...

Amazon Linux 2 : openjpeg2 (ALAS-2022-1894)

The version of openjpeg2 installed on the remote host is prior to 2.4.0-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1894 advisory. A flaw was found in the opj2decompress program in openjpeg2 in the way it handles an input directory with a large number of files...

Amazon Linux 2 : python3 (ALAS-2022-1896)

The version of python3 installed on the remote host is prior to 3.7.15-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1896 advisory. 2025-02-11: CVE-2021-28861 was added to this advisory. A flaw was found in python. In algorithms with quadratic time...

Amazon Linux 2 : vim (ALAS-2022-1902)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1902 advisory. 2024-02-01: CVE-2022-3591 was added to this advisory. 2024-02-01: CVE-2022-3520 was added to this advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-352...

Amazon Linux 2 : samba (ALAS-2022-1898)

The version of samba installed on the remote host is prior to 4.10.16-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1898 advisory. A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd...

Amazon Linux 2 : device-mapper-multipath (ALAS-2022-1883)

The version of device-mapper-multipath installed on the remote host is prior to 0.4.9-136. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1883 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or ...

Amazon Linux 2 : systemd (ALAS-2022-1899)

The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1899 advisory. An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...