Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-009)

The version of kernel installed on the remote host is prior to 5.4.156-83.273. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-009 advisory. A flaw was found in the Linux kernel. A memory leak in the ccp-ops crypto driver can allow attackers to cau...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-012)

The version of kernel installed on the remote host is prior to 5.4.46-19.75. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-012 advisory. A NULL pointer dereference flaw may occur in the Linux kernel's relayopen in kernel/relay.c. if the allocperc...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-013)

The version of kernel installed on the remote host is prior to 5.4.50-25.83. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-013 advisory. A logic bug flaw was found in the Linux kernel's implementation of SSBD. A bug in the logic handling allows a...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-014)

The version of kernel installed on the remote host is prior to 5.4.58-27.104. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-014 advisory. A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-016)

The version of kernel installed on the remote host is prior to 5.4.68-34.125. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-016 advisory. A flaw was found in the Linux kernel's implementation of BTRFS free space management, where the kernel does...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-017)

The version of kernel installed on the remote host is prior to 5.4.74-36.135. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2022-017 advisory. A flaw was found in the Linux kernel. A local attacker, able to inject conntrack netlink configuration, could overflo...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-018)

The version of kernel installed on the remote host is prior to 5.4.80-40.140. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-018 advisory. A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing ...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-022)

The version of kernel installed on the remote host is prior to 5.4.176-91.338. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-022 advisory. 2024-12-05: CVE-2022-48757 was added to this advisory. 2024-08-01: CVE-2022-48760 was added to this advisor...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-025 (ALASKERNEL-5.4-2022-025)

The version of kernel installed on the remote host is prior to 5.4.188-104.359. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-025 advisory. Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel CVE-2022-20368 ...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-021)

The version of kernel installed on the remote host is prior to 5.4.172-90.336. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-021 advisory. A denial of service flaw for virtual machine guests in the Linux kernel's Xen hypervisor subsystem was foun...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-009)

The version of kernel installed on the remote host is prior to 5.10.93-87.444. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-009 advisory. A denial of service flaw for virtual machine guests in the Linux kernel's Xen hypervisor subsystem was fou...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-024 (ALASKERNEL-5.4-2022-024)

The version of kernel installed on the remote host is prior to 5.4.186-102.354. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-024 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/damon/dbgfs: fix 'struct pid' leaks...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-001)

The version of kernel installed on the remote host is prior to 5.10.35-31.135. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-001 advisory. 2024-05-23: CVE-2021-46972 was added to this advisory. 2024-05-23: CVE-2021-46974 was added to this...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2021-001)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0312.b07-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2021-001 advisory. No versions of an Amazon Linux Java Virtual Machine JVM are affected by CVE-2021-44228 o...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-011 (ALASKERNEL-5.10-2022-011)

The version of kernel installed on the remote host is prior to 5.10.102-99.473. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-011 advisory. AMD recommends using a software mitigation for this issue, which the kernel is enabling by default. The...

Amazon Linux AMI : containerd, docker (ALAS-2022-1582)

The version of containerd installed on the remote host is prior to 1.4.13-2.1. The version of docker installed on the remote host is prior to 20.10.13-2.1. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1582 advisory. A flaw was found in Moby Docker Engine, where...

Amazon Linux AMI : httpd24 (ALAS-2022-1584)

The version of httpd24 installed on the remote host is prior to 2.4.53-1.96. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1584 advisory. A flaw was found in the modlua module of httpd. A crafted request body can cause a read to a random memory area due to ...

Amazon Linux AMI : golang (ALAS-2022-1583)

The version of golang installed on the remote host is prior to 1.16.15-1.37. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1583 advisory. 2024-01-03: CVE-2021-27919 was added to this advisory. An out of bounds read vulnerability was found in golang. When...

Amazon Linux 2 : docker, containerd (ALAS-2022-018) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. Deprecated by al2ALASDOCKER-2022-018.nasl plugin ID 160412 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALAS-2022-002) (deprecated)

This plugin has been deprecated following detection of an issue with overlapping filenames. It has been replaced by al2ALASCORRETTO8-2022-002.nasl plugin ID 160405. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux 2 Security Advisory...