1806 matches found
Amazon Linux AMI : kernel (ALAS-2023-1707)
The version of kernel installed on the remote host is prior to 4.14.301-153.528. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1707 advisory. 2024-06-07: CVE-2023-26607 was added to this advisory. A vulnerability was found in Linux Kernel. It has been...
Amazon Linux AMI : kernel (ALAS-2023-1701)
The version of kernel installed on the remote host is prior to 4.14.309-159.529. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1701 advisory. Detected a few exploitable gadgets that could leak secret memory through a side-channel such as MDS as well as...
Amazon Linux AMI : kernel (ALAS-2023-1706)
The version of kernel installed on the remote host is prior to 4.14.305-155.531. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1706 advisory. Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interfac...
Amazon Linux AMI : lighttpd (ALAS-2023-1705)
The version of lighttpd installed on the remote host is prior to 1.4.53-1.37. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1705 advisory. In lighttpd 1.4.65, modwstunnel does not initialize a handler function pointer if an invalid HTTP request websocket handshake i...
Amazon Linux AMI : httpd24 (ALAS-2023-1711)
The version of httpd24 installed on the remote host is prior to 2.4.56-1.100. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1711 advisory. A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory...
Amazon Linux AMI : vim (ALAS-2023-1703)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1703 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189. CVE-2023-0288 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 Divide By Zero in...
Amazon Linux AMI : freeradius (ALAS-2023-1699)
The version of freeradius installed on the remote host is prior to 2.2.6-7.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1699 advisory. When an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionarie...
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2023-1697)
The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.362.b08-1.72. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1697 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE...
Amazon Linux AMI : git (ALAS-2023-1700)
The version of git installed on the remote host is prior to 2.38.4-1.80. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1700 advisory. Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36....
Amazon Linux AMI : batik (ALAS-2023-1695)
The version of batik installed on the remote host is prior to 1.7-10.10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1695 advisory. Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel...
Amazon Linux AMI : ca-certificates (ALAS-2023-1690)
The version of ca-certificates installed on the remote host is prior to 2018.2.22-65.1.29. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1690 advisory. Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while...
Amazon Linux AMI : openldap (ALAS-2023-1691)
The version of openldap installed on the remote host is prior to 2.4.40-16.32. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1691 advisory. In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backen...
Amazon Linux AMI : squid (ALAS-2023-1687)
The version of squid installed on the remote host is prior to 3.5.20-17.44. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1687 advisory. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of...
Amazon Linux AMI : xorg-x11-server (ALAS-2023-1689)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1689 advisory. A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data,...
Amazon Linux AMI : mysql57 (ALAS-2023-1686)
The version of mysql57 installed on the remote host is prior to 5.7.41-1.18. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1686 advisory. 2023-06-07: CVE-2023-21963 was added to this advisory. Vulnerability in the MySQL Server product of Oracle MySQL...
Amazon Linux AMI : clamav (ALAS-2023-1694)
The version of clamav installed on the remote host is prior to 0.103.8-1.52. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1694 advisory. Possible remote code execution vulnerability in the ClamAV HFS+ file parser. The issue affects ClamAV versions 1.0.0 an...
Amazon Linux AMI : kernel (ALAS-2023-1688)
The version of kernel installed on the remote host is prior to 4.14.262-135.486. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1688 advisory. 2024-04-30: CVE-2023-0047 was removed from this advisory rejected. 2024-02-01: CVE-2023-0047 was added to this...
Amazon Linux AMI : golang, golang-bin, golang-misc (ALAS-2023-1685)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1685 advisory. Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CVE-2022-23772 cmd/go in Go before 1.16.14 and 1.17.x befo...
