Amazon Linux AMI : vim (ALAS-2023-1893)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1893 advisory. Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file...

Amazon Linux AMI : samba (ALAS-2023-1896)

The version of samba installed on the remote host is prior to 4.10.16-24.68. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1896 advisory. When doing NTLM authentication, the client sends replies tocryptographic challenges back to the server. These repliesha...

Amazon Linux AMI : openssl (ALAS-2023-1891)

The version of openssl installed on the remote host is prior to 1.0.2k-16.165. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1891 advisory. Issue summary: Generating excessively long X9.42 DH keys or checkingexcessively long X9.42 DH keys or parameters may be very...

Amazon Linux AMI : libX11 (ALAS-2023-1895)

The version of libX11 installed on the remote host is prior to 1.6.0-2.2.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1895 advisory. A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local user to...

PT-2023-8204 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to the BMP Logo Handler component in the AMI AptioV BIOS setup utility, which allows for an unrestricted upload of dangerous file types, including PNG logo files. Th...

CVE-2023-39537

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39535

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

Input validation

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39537

AMI AptioV BIOS contains a vulnerability where improper input validation over a local network can lead to loss of confidentiality, integrity, and availability. Affected: AMI AptioV BIOS firmware (TCG2 context). Root cause: improper input validation in BIOS as described in CVE-2023-39537. Impact: ...

CVE-2023-39537 Improper input validation in BIOS TCG2

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39536 Improper input validation in BIOS OFBD

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability...

CVE-2023-39536

AMI AptioV BIOS contains an improper input validation vulnerability that can be exploited over a local network, potentially impacting confidentiality, integrity, and availability. Affected software: AMI AptioV BIOS. Root cause: input validation issue in BIOS handling over LAN. Exploitation status...

CVE-2023-39535

CVE-2023-39535 concerns AMI AptioV BIOS with a vulnerability due to improper input validation that can be triggered over a local network. Affected: AMI AptioV BIOS firmware (BIOS-level component). Root cause: input validation weakness in the BIOS enabling a local network attacker to potentially c...

AMI AptioV Security Vulnerability

AMI AptioV is a firmware from AMI. A security vulnerability exists in AMI AptioV that stems from the inclusion of a security issue in the BIOS, which can be exploited by an attacker to cause a loss of confidentiality, integrity, and availability through the use of incorrect input validation over ...

PT-2023-27005 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...

AMI AptioV Security Vulnerability

AMI AptioV is a firmware from AMI. A security vulnerability exists in AMI AptioV that stems from the inclusion of a security issue in the BIOS, which can be exploited by an attacker to cause a loss of confidentiality, integrity, and availability through the use of incorrect input validation over ...

Amazon Linux AMI : mysql57 (ALAS-2023-1878)

The version of mysql57 installed on the remote host is prior to 5.7.43-1.20. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1878 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are...

Amazon Linux AMI : httpd24 (ALAS-2023-1877)

The version of httpd24 installed on the remote host is prior to 2.4.58-1.101. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1877 advisory. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through...