Amazon Linux 2 : util-linux (ALAS-2022-1901)

The version of util-linux installed on the remote host is prior to 2.30.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1901 advisory. A flaw was found in the Linux kernel's util-linux chfn and chsh utilities when compiled with Readline support. The Readline...

Amazon Linux 2 : util-linux (ALAS-2022-1878)

The version of util-linux installed on the remote host is prior to 2.30.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1878 advisory. A command injection flaw was found in the way util-linux implements umount autocompletion in Bash. An attacker with the ability...

Amazon Linux 2 : curl (ALAS-2022-1882)

The version of curl installed on the remote host is prior to 7.79.1-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1882 advisory. A vulnerability was found in curl. The issue occurs when doing HTTPS transfers, where curl might erroneously use the read...

Amazon Linux 2 : thunderbird (ALAS-2022-1900)

The version of thunderbird installed on the remote host is prior to 102.4.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1900 advisory. 2024-05-09: CVE-2021-28429 was added to this advisory. Integer overflow vulnerability in avtimecodemakestring in...

Amazon Linux 2 : device-mapper-multipath (ALAS-2022-1883)

The version of device-mapper-multipath installed on the remote host is prior to 0.4.9-136. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1883 advisory. multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or ...

Amazon Linux 2 : samba (ALAS-2022-1898)

The version of samba installed on the remote host is prior to 4.10.16-20. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1898 advisory. A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd...

Amazon Linux 2 : systemd (ALAS-2022-1899)

The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1899 advisory. An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...

Amazon Linux 2 : python3 (ALAS-2022-1897)

The version of python3 installed on the remote host is prior to 3.7.15-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1897 advisory. The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows...

Amazon Linux 2 : vim (ALAS-2022-1902)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1902 advisory. 2024-02-01: CVE-2022-3591 was added to this advisory. 2024-02-01: CVE-2022-3520 was added to this advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-352...

Amazon Linux 2 : python3 (ALAS-2022-1896)

The version of python3 installed on the remote host is prior to 3.7.15-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1896 advisory. 2025-02-11: CVE-2021-28861 was added to this advisory. A flaw was found in python. In algorithms with quadratic time...

Amazon Linux 2 : libtiff (ALAS-2022-1891)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1891 advisory. A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a...

Amazon Linux 2 : ant (ALAS-2022-1880)

The version of ant installed on the remote host is prior to 1.9.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1880 advisory. When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memor...

Amazon Linux 2 : git (ALAS-2022-1886)

The version of git installed on the remote host is prior to 2.38.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1886 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34....

Amazon Linux 2 : mutt (ALAS-2022-1892)

The version of mutt installed on the remote host is prior to 1.5.21-29. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1892 advisory. Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. CVE-2020-14093 Mutt before...

Amazon Linux 2 : bluez (ALAS-2022-1881)

The version of bluez installed on the remote host is prior to 5.44-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1881 advisory. 2023-06-07: CVE-2022-39177 was added to this advisory. A vulnerability was found in BlueZ. This flaw allows physically...

Amazon Linux 2 : 389-ds-base (ALAS-2022-1879)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1879 advisory. A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL...

Amazon Linux 2 : libbpf (ALAS-2022-1889)

The version of libbpf installed on the remote host is prior to 0.5.0-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1889 advisory. A vulnerability classified as critical has been found in Linux Kernel. Affected is the function btfdumpnamedups of the file...

Amazon Linux 2 : ncurses (ALAS-2022-1893)

The version of ncurses installed on the remote host is prior to 6.0-8.20170212. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1893 advisory. The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry- description...

Amazon Linux 2 : golang (ALAS-2022-1887)

The version of golang installed on the remote host is prior to 1.18.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1887 advisory. Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to...

Amazon Linux 2 : e2fsprogs (ALAS-2022-1884)

The version of e2fsprogs installed on the remote host is prior to 1.42.9-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1884 advisory. An out-of-bounds read/write vulnerability was found in e2fsprogs. This issue leads to a segmentation fault and possibly arbitra...