Amazon Linux AMI : python38 (ALAS-2022-1651)

The version of python38 installed on the remote host is prior to 3.8.5-1.6. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1651 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...

Amazon Linux AMI : git (ALAS-2022-1653)

The version of git installed on the remote host is prior to 2.38.1-1.77. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1653 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5,...

Amazon Linux AMI : python36 (ALAS-2022-1652)

The version of python36 installed on the remote host is prior to 3.6.12-1.23. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1652 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...

Amazon Linux AMI : libtiff (ALAS-2022-1647)

The version of libtiff installed on the remote host is prior to 4.0.3-35.40. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1647 advisory. A flaw was found in libtiffs tiffcrop utility that has a uint32t underflow that can lead to an out-of- bounds read and write. Th...

Amazon Linux 2022 : samba (ALAS2022-2022-224)

The version of samba installed on the remote host is prior to 4.16.2-0. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-224 advisory. - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the...

Amazon Linux AMI : expat (ALAS-2022-1655)

The version of expat installed on the remote host is prior to 2.1.0-15.33. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1655 advisory. In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in...

Amazon Linux 2022 : python-waitress (ALAS2022-2022-235)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-235 advisory. - Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the...

Amazon Linux 2022 : wireshark (ALAS2022-2022-226)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-226 advisory. - NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file CVE-2021-39920 - NULL pointer exception in the...

Amazon Linux 2022 : xmlsec1 (ALAS2022-2022-257)

The version of xmlsec1 installed on the remote host is prior to 1.2.33-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-257 advisory. - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE...

Amazon Linux 2022 : vim (ALAS2022-2022-251)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-251 advisory. - A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qfupdatebuffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to...

Amazon Linux 2022 : libldb (ALAS2022-2022-247)

The version of libldb installed on the remote host is prior to 2.5.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-247 advisory. - A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a...

Amazon Linux 2022 : dnsmasq (ALAS2022-2022-227)

The version of dnsmasq installed on the remote host is prior to 2.86-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-227 advisory. - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted...

Amazon Linux 2022 : expat (ALAS2022-2022-261)

The version of expat installed on the remote host is prior to 2.5.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-261 advisory. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in...

Amazon Linux 2022 : mariadb105 (ALAS2022-2022-245)

The version of mariadb105 installed on the remote host is prior to 10.5.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-245 advisory. - MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at...

Amazon Linux 2022 : expat (ALAS2022-2022-259)

The version of expat installed on the remote host is prior to 2.4.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-259 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not teste...

Amazon Linux 2022 : protobuf-c (ALAS2022-2022-248)

The version of protobuf-c installed on the remote host is prior to 1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-248 advisory. - Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in...

Amazon Linux 2022 : libksba (ALAS2022-2022-249)

The version of libksba installed on the remote host is prior to 1.6.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-249 advisory. - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be...

Amazon Linux 2022 : docker (ALAS2022-2022-237)

The version of docker installed on the remote host is prior to 20.10.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-237 advisory. - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby...

Amazon Linux 2022 : log4j (ALAS2022-2022-225)

The version of log4j installed on the remote host is prior to 2.17.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-225 advisory. - Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in...

Amazon Linux 2022 : expat (ALAS2022-2022-232)

The version of expat installed on the remote host is prior to 2.4.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-232 advisory. - In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead t...