Important: log4j-cve-2021-44228-hotpatch

Issue Overview: The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to. In order to mimic the Linux capabilities of the target process, Amazon Linu...

Important: zlib

Issue Overview: An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has many distant matches. For some rare inputs with a large number of distant matches crafted payloads, the buffer into which the compressed or deflated...

Amazon Linux 2 : zlib (ALAS-2022-1772)

The version of zlib installed on the remote host is prior to 1.2.7-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1772 advisory. An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has...

Amazon Linux AMI : libgcrypt (ALAS-2022-1578)

The version of libgcrypt installed on the remote host is prior to 1.5.3-12.20. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1578 advisory. A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to...

Amazon Linux AMI : vim (ALAS-2022-1579)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1579 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted...

Amazon Linux 2 : kernel, --advisory ALAS2-2022-1768 (ALAS-2022-1768)

The version of kernel installed on the remote host is prior to 4.14.273-207.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1768 advisory. A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw...

Amazon Linux 2 : vim (ALAS-2022-1771)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1771 advisory. A flaw was found in vim that causes an out-of-range pointer offset vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-05...

Amazon Linux 2 : openldap (ALAS-2022-1770)

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1770 advisory. A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP'...

Amazon Linux 2 : libgcrypt (ALAS-2022-1769)

The version of libgcrypt installed on the remote host is prior to 1.5.3-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1769 advisory. A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to decryp...

Amazon Linux AMI : glibc (ALAS-2022-1576)

The version of glibc installed on the remote host is prior to 2.17-324.189. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1576 advisory. A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the...

Amazon Linux AMI : kernel (ALAS-2022-1577)

The version of kernel installed on the remote host is prior to 4.14.273-140.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1577 advisory. 2024-08-29: CVE-2022-48855 was added to this advisory. A flaw was found in the Linux kernel in...

Amazon Linux 2 : glibc (ALAS-2022-1767)

The version of glibc installed on the remote host is prior to 2.26-58. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1767 advisory. A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the sunrpc's...

Amazon Linux AMI : openssl (ALAS-2022-1575)

The version of openssl installed on the remote host is prior to 1.0.2k-16.156. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1575 advisory. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime...

Amazon Linux 2 : openssl, openssl11 (ALAS-2022-1766)

The version of openssl installed on the remote host is prior to 1.0.2k-24. The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1766 advisory. The BNmodsqrt function, which computes a modular...

Critical: expat

Issue Overview: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...

Amazon Linux 2 : expat (ALAS-2022-1764)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1764 advisory. A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML...

Amazon Linux AMI : expat (ALAS-2022-1573)

The version of expat installed on the remote host is prior to 2.1.0-12.27. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1573 advisory. A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML...

Amazon Linux AMI : cyrus-sasl (ALAS-2022-1574)

The version of cyrus-sasl installed on the remote host is prior to 2.1.23-13.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1574 advisory. A flaw was found in the SQL plugin shipped with Cyrus SASL. Failure to properly escape the SQL input allows a remote attacke...

Amazon Linux 2 : containerd (ALAS-2022-016) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. Deprecated by al2ALASDOCKER-2022-016.nasl plugin ID 160406 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...

Medium: containerd

Issue Overview: containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to...