Amazon Linux 2 : amazon-ssm-agent (ALAS-2025-2739)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.1611.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2739 advisory. go-git is a highly extensible git implementation library written in pure Go. An argument injection...

Amazon Linux 2 : edk2 (ALAS-2025-2750)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2750 advisory. Issue summary: A timing side-channel which could potentially allow recoveringthe private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature...

Medium: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6routempathnotify CVE-2024-26852 In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem...

Medium: python3

Issue Overview: CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due ...

Amazon Linux 2 : python3 (ALAS-2025-2743)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2743 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for th...

Amazon WorkSpaces < 5.22.1 MITM

The version of Amazon WorkSpaces installed on the host is vulnerable to a man-in-the-middle vulnerability, allowing an attacker to access remote sessions. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Amazon DCV Client Installed (Linux)

Binary data amazondcvclientlinuxinstalled.nbin...

Amazon Workspaces Client Installed (macOS)

Binary data amazonworkspacesclientmacosinstalled.nbin...

Amazon DCV Client Installed (macOS)

Binary data amazondcvclientmacosinstalled.nbin...

Amazon Workspaces Client Installed (Windows)

Binary data amazonworkspacesclientwininstalled.nbin...

openSUSE Security Advisory (SUSE-SU-2025:0277-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon DCV Client Installed (Windows)

Binary data amazondcvclientwininstalled.nbin...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:0277-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0277-1 advisory. Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0 Patch Instruction...

SUSE-SU-2025:0277-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0...

Malicious code in amazon-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6c3c7c427f25937801f54534b488f10721cf11e43e122f0f00a47350ba80c2c The OpenSSF Package Analysis project identified 'amazon-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-384 Malicious code in amazon-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6c3c7c427f25937801f54534b488f10721cf11e43e122f0f00a47350ba80c2c The OpenSSF Package Analysis project identified 'amazon-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-373 Malicious code in amazon-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4728fc0ef630dde9616340e6f9a3571e2bb5e75e034fac804e6ca9b0030a7846 The OpenSSF Package Analysis project identified 'amazon-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...