Skip to content
OpenAdvisories

Source

Amazon Linux Security Center (ALAS)

Source: https://alas.aws.amazon.com/

All Critical High Medium Low With exploited CVEs

7 results · Clear filters · Feed

  • Critical max 10.0
    ALAS2-2021-1731 2 CVEs 2 exploited

    Critical: java-17-amazon-corretto security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45046: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attacke…

  • Critical max 10.0
    ALAS2-2021-1730 2 CVEs 2 exploited

    Critical: aws-kinesis-agent security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45046: A flaw was found in the Apache Log4j logging library in versions from 2.0.0 and before 2.16.0. A remote attacker with control over Thread Context Map (MDC…

  • Critical max 5.5
    ALAS2-2021-1585 3 CVEs 1 exploited

    Critical: samba security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-1472: A flaw was found in the Microsoft Windows Netlogon Remote Protocol (MS-NRPC), where it reuses a known, static, zero-value initialization vector (IV) in AES…

    first Jan 5, 2021
  • Critical max 8.1
    ALAS2-2020-1429 10 CVEs 2 exploited

    Critical: thunderbird security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-6831: A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memo…

    first May 19, 2020
  • Critical max 9.8
    ALAS2-2019-1378 1 CVE 1 exploited

    Critical: openslp security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-5544: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical s…

    first Dec 16, 2019
  • Critical max 8.7
    ALAS2-2019-1344 1 CVE 1 exploited

    Critical: php security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11043: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to…

    first Oct 31, 2019
  • Critical max 10.0
    ALAS2-2019-1250 6 CVEs 2 exploited

    Critical: thunderbird security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11708: 1722673: CVE-2019-11708 Mozilla: Sandbox escape using Prompt:Open CVE-2019-11707: 1721789: CVE-2019-11707 Mozilla: Type confusion in Array.pop CVE-2019-11…

    first Jul 18, 2019