Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-50410 In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6nullentry-rt6iidev in icmp6dev...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-50410 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about Amazon...

Medium: python-pip

Issue Overview: When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by usin...

Medium: cuda-gdb-12-9

Issue Overview: NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit of this vulnerability might lead to information disclosure or denial of service. CVE-2025-23272 Affected Packages:...

Medium: edk2

Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

Medium: openssl

Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...

CVE-2025-11573

An infinite loop issue in Amazon.IonDotnet library versions...

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input via the LoadBlob function. An attacker can cause the application to enter an infinite loop and exhaust system resources by submitting specially crafted text input that triggers...

EUVD-2025-33578

Amazon.IonDotnet is vulnerable to Denial of Service attacks...

Amazon.IonDotnet is vulnerable to Denial of Service attacks

Summary Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will no...

CVE-2025-23137 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-aws, linux-vmware, linux-qemu...

CVE-2025-11573

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

CVE-2025-11573 Denial of Service issue in Amazon.IonDotnet

An infinite loop issue in Amazon.IonDotnet library versions v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not...

CVE-2025-11573

CVE-2025-11573 affects Amazon.IonDotnet library. Versions earlier than 1.3.2 are vulnerable to an infinite loop triggered by specially crafted text input, leading to denial of service. Remediation is to upgrade to 1.3.2 or higher; the library has been deprecated as of 2025-08-20 and will not rece...

PT-2025-41447

Name of the Vulnerable Software and Affected Versions Amazon.IonDotnet versions prior to 1.3.2 Description An infinite loop issue exists in the Amazon.IonDotnet library that could allow an attacker to cause a denial of service by providing a specially crafted text input. The library has been...

Amazon.IonDotnet is vulnerable to Denial of Service attacks

Amazon.IonDotnet is a library for the Dotnet language that is used to read and write Amazon Ion data. An issue exists where, under certain circumstances, the library could an infinite loop, resulting in denial of service. As of August 20, 2025, this library has been deprecated and will not receiv...

CVE-2025-11462

creationtimestamp| type| source ---|---|--- 2025-10-07 20:22:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115334744423843612 2025-10-07 20:25:58+00:00| seen| https://aws.amazon.com/security/security-bulletins/AWS-2025-020/ 2025-10-07 22:03:27+00:00| seen|...

CVE-2025-11462

CVE-2025-11462 affects AWS VPN Client for macOS, versions 1.3.2–5.2.0. Improper validation of the log destination directory during log rotation allows a local user to create a symlink from a client log file to a privileged location, enabling code execution with root privileges if crafted API call...