Important: kernel

Issue Overview: Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel CVE-2022-20368 A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user to crash or escalate their privileges on the system...

Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2022-1773)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-16. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1773 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic...

Amazon Linux AMI : kernel (ALAS-2022-1581)

The version of kernel installed on the remote host is prior to 4.14.275-142.503. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1581 advisory. A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user to...

Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2022-1580)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-16. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1580 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic...

Important: kernel

Issue Overview: A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2022-26490 A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and...

Amazon Linux 2 : kernel, --advisory ALAS2-2022-1774 (ALAS-2022-1774)

The version of kernel installed on the remote host is prior to 4.14.275-207.503. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1774 advisory. A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user t...

Important: zlib

Issue Overview: An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has many distant matches. For some rare inputs with a large number of distant matches crafted payloads, the buffer into which the compressed or deflated...

Amazon Linux 2 : openldap (ALAS-2022-1770)

The version of openldap installed on the remote host is prior to 2.4.44-23. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1770 advisory. A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP'...

Amazon Linux AMI : kernel (ALAS-2022-1577)

The version of kernel installed on the remote host is prior to 4.14.273-140.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1577 advisory. 2024-08-29: CVE-2022-48855 was added to this advisory. A flaw was found in the Linux kernel in...

Amazon Linux 2 : kernel, --advisory ALAS2-2022-1768 (ALAS-2022-1768)

The version of kernel installed on the remote host is prior to 4.14.273-207.502. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1768 advisory. A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw...

Amazon Linux 2 : glibc (ALAS-2022-1767)

The version of glibc installed on the remote host is prior to 2.26-58. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1767 advisory. A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the sunrpc's...

Amazon Linux AMI : libgcrypt (ALAS-2022-1578)

The version of libgcrypt installed on the remote host is prior to 1.5.3-12.20. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1578 advisory. A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to...

Amazon Linux 2 : zlib (ALAS-2022-1772)

The version of zlib installed on the remote host is prior to 1.2.7-19. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1772 advisory. An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating ex: when compressing if the input has...

Amazon Linux AMI : vim (ALAS-2022-1579)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1579 advisory. A flaw was found in vim. The vulnerability occurs due to a crash when recording and using Select mode and leads to an out-of-bounds read. This flaw allows an attacker to input a specially crafted...

Amazon Linux 2 : libgcrypt (ALAS-2022-1769)

The version of libgcrypt installed on the remote host is prior to 1.5.3-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1769 advisory. A side-channel attack flaw was found in the way libgcrypt implemented Elgamal encryption. This flaw allows an attacker to decryp...

Amazon Linux 2 : vim (ALAS-2022-1771)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1771 advisory. A flaw was found in vim that causes an out-of-range pointer offset vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. CVE-2022-05...

Amazon Linux AMI : glibc (ALAS-2022-1576)

The version of glibc installed on the remote host is prior to 2.17-324.189. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1576 advisory. A stack based buffer-overflow vulnerability was found in the deprecated compatibility function svcunixcreate in the...

Amazon Linux 2 : openssl, openssl11 (ALAS-2022-1766)

The version of openssl installed on the remote host is prior to 1.0.2k-24. The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1766 advisory. The BNmodsqrt function, which computes a modular...

Amazon Linux AMI : openssl (ALAS-2022-1575)

The version of openssl installed on the remote host is prior to 1.0.2k-16.156. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1575 advisory. The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime...

Critical: expat

Issue Overview: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences for example, from start tag names to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor...