Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-047)

The version of kernel installed on the remote host is prior to 5.10.205-194.804. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-047 advisory. A race condition leading to a use-after-free issue was found in the QXL driver in the Linux kernel...

Amazon Linux 2 : postgresql (ALASPOSTGRESQL14-2024-004)

The version of postgresql installed on the remote host is prior to 14.10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL14-2024-004 advisory. Certain aggregate function calls receiving unknown-type arguments could disclose bytes of server memory from...

Amazon Linux 2 : postgresql (ALASPOSTGRESQL12-2024-007)

The version of postgresql installed on the remote host is prior to 12.17-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL12-2024-007 advisory. Certain aggregate function calls receiving unknown-type arguments could disclose bytes of server memory from...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2024-035 (ALASNITRO-ENCLAVES-2024-035)

The version of containerd installed on the remote host is prior to 1.7.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2024-035 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versi...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2024-010)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0402.b08-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2024-010 advisory. A vulnerability that allows an attacker to execute arbitrary java code from the javascri...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-058)

The version of kernel installed on the remote host is prior to 5.4.266-178.365. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2024-058 advisory. An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2024-046)

The version of kernel installed on the remote host is prior to 5.10.205-195.807. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2024-046 advisory. An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux...

Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2024-035 (ALASDOCKER-2024-035)

The version of containerd installed on the remote host is prior to 1.7.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2024-035 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-034)

The version of kernel installed on the remote host is prior to 5.15.145-95.161. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-034 advisory. An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux...

Amazon Linux 2 : postgresql (ALASPOSTGRESQL13-2024-005)

The version of postgresql installed on the remote host is prior to 13.13-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL13-2024-005 advisory. Certain aggregate function calls receiving unknown-type arguments could disclose bytes of server memory from...

Amazon Linux 2 : firefox (ALASFIREFOX-2024-020)

The version of firefox installed on the remote host is prior to 115.6.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2FIREFOX-2024-020 advisory. A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-035)

The version of kernel installed on the remote host is prior to 5.15.145-94.156. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2024-035 advisory. An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an...

Amazon Linux 2 : libpq (ALASPOSTGRESQL14-2024-005)

The version of libpq installed on the remote host is prior to 14.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2POSTGRESQL14-2024-005 advisory. 2024-06-06: CVE-2023-5869 was removed from this advisory.2024-06-06: The severity of this advisory was modified from...

Low: containerd

Issue Overview: No CVE associated with this advisory Affected Packages: containerd Note: This advisory is applicable to Amazon Linux 2 - Docker Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories...

Amazon Linux 2 : postfix (ALAS-2024-2420)

The version of postfix installed on the remote host is prior to 2.10.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2420 advisory. Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and...

Amazon Linux 2 : rust (ALAS-2024-2426)

The version of rust installed on the remote host is prior to 1.68.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2426 advisory. Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not esca...

Amazon Linux 2 : webkitgtk4, --advisory ALAS2-2024-2427 (ALAS-2024-2427)

The version of webkitgtk4 installed on the remote host is prior to 2.42.3-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2427 advisory. Impact: Visiting a website that frames malicious content may lead to UI spoofing. Description: The issue was addressed...

Amazon Linux 2 : dbus (ALAS-2024-2428)

The version of dbus installed on the remote host is prior to 1.10.24-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2428 advisory. D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon...

Amazon Linux 2 : traceroute (ALAS-2024-2423)

The version of traceroute installed on the remote host is prior to 2.0.22-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2423 advisory. In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines. CVE-2023-46316...

Amazon Linux 2 : thunderbird (ALAS-2024-2417)

The version of thunderbird installed on the remote host is prior to 115.6.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2417 advisory. A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function...