Amazon Linux 2 : java-11-openjdk (ALASJAVA-OPENJDK11-2021-001)

The version of java-11-openjdk installed on the remote host is prior to 11.0.13.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2JAVA-OPENJDK11-2021-001 advisory. No versions of an Amazon Linux Java Virtual Machine JVM are affected by CVE-2021-44228 or...

Amazon Linux 2 : curl (ALAS-2022-1792)

The version of curl installed on the remote host is prior to 7.79.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1792 advisory. A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly...

Amazon Linux 2 : maven-shared-utils (ALAS-2022-1794)

The version of maven-shared-utils installed on the remote host is prior to 0.4-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1794 advisory. org.apache.maven.shared:maven-shared-utils is a functional replacement for plexus-utils in Maven. Affected versions of thi...

Amazon Linux 2 : kernel (ALAS-2022-1793)

The version of kernel installed on the remote host is prior to 4.14.276-211.499. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1793 advisory. 2024-02-01: CVE-2022-41858 was added to this advisory. A use-after-free flaw was found in the Linux kernel's FUSE...

Critical: maven-shared-utils

Issue Overview: org.apache.maven.shared:maven-shared-utils is a functional replacement for plexus-utils in Maven. Affected versions of this package are vulnerable to Command Injection. The Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-004)

The version of kernel installed on the remote host is prior to 5.10.59-52.142. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-004 advisory. A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel...

Amazon Linux 2 : containerd (ALASDOCKER-2022-015)

The version of containerd installed on the remote host is prior to 1.4.6-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2022-015 advisory. A bug was found in containerd where containers launched through containerd's CRI implementation with a specially-crafted...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-009)

The version of kernel installed on the remote host is prior to 5.10.93-87.444. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-009 advisory. A denial of service flaw for virtual machine guests in the Linux kernel's Xen hypervisor subsystem was fou...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-025 (ALASKERNEL-5.4-2022-025)

The version of kernel installed on the remote host is prior to 5.4.188-104.359. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-025 advisory. Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel CVE-2022-20368 ...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-018)

The version of kernel installed on the remote host is prior to 5.4.80-40.140. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-018 advisory. A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing ...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-010)

The version of kernel installed on the remote host is prior to 5.10.96-90.460. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-010 advisory. 2024-12-05: CVE-2022-48757 was added to this advisory. 2024-08-01: CVE-2022-48760 was added to this...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-001)

The version of kernel installed on the remote host is prior to 5.10.35-31.135. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-001 advisory. 2024-05-23: CVE-2021-46972 was added to this advisory. 2024-05-23: CVE-2021-46974 was added to this...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-013)

The version of kernel installed on the remote host is prior to 5.4.50-25.83. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-013 advisory. A logic bug flaw was found in the Linux kernel's implementation of SSBD. A bug in the logic handling allows a...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-020 (ALASKERNEL-5.4-2022-020)

The version of kernel installed on the remote host is prior to 5.4.95-42.163. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-020 advisory. A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel. There was a race problem in...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-013 (ALASKERNEL-5.10-2022-013)

The version of kernel installed on the remote host is prior to 5.10.109-104.500. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-013 advisory. A use-after-free flaw was found in the Linux kernel's sound subsystem in the way a user triggers...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-016)

The version of kernel installed on the remote host is prior to 5.4.68-34.125. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-016 advisory. A flaw was found in the Linux kernel's implementation of BTRFS free space management, where the kernel does...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-005)

The version of kernel installed on the remote host is prior to 5.10.62-55.141. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-005 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the Atheros chipsets. An...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-006 (ALASKERNEL-5.10-2022-006)

The version of kernel installed on the remote host is prior to 5.10.68-62.173. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-006 advisory. A flaw was found in the Linux kernel. When reusing a socket with an attached dccpshctxccid as a listener,...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-022)

The version of kernel installed on the remote host is prior to 5.4.176-91.338. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-022 advisory. 2024-12-05: CVE-2022-48757 was added to this advisory. 2024-08-01: CVE-2022-48760 was added to this advisor...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-009)

The version of kernel installed on the remote host is prior to 5.4.156-83.273. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-009 advisory. A flaw was found in the Linux kernel. A memory leak in the ccp-ops crypto driver can allow attackers to cau...