340 results · Clear filters · Feed
-
Low max 3.6ALAS2023-2024-469 1 CVE
Low: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-48706: Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time an…
first Jan 3, 2024 -
Low max 6.2ALAS2023-2024-475 1 CVE
Low: tar security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39804: It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could supply a specially crafted file and cause tar to …
first Jan 3, 2024 -
Low max 5.3ALAS2023-2024-472 1 CVE
Low: curl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-46219: When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of …
first Jan 3, 2024 -
Low max 3.9ALAS2023-2023-447 7 CVEs
Low: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-48237: Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may …
first Dec 6, 2023 -
Low max 5.5ALAS2023-2023-452 1 CVE
Low: traceroute security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-46316: In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.
first Dec 6, 2023 -
Low max 4.7ALAS2023-2023-450 1 CVE
Low: shadow-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-4641: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, sha…
first Dec 6, 2023 -
Low max 3.9ALAS2-2023-2353 7 CVEs
Low: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-48237: Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be …
first Nov 29, 2023 -
LowALAS2-2023-2373 1 CVE
Low: binutils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-32256: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.
first Nov 29, 2023 -
LowALAS2-2023-2369 1 CVE
Low: gmp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-43618: A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from t…
first Nov 29, 2023 -
LowALAS2-2023-2368 1 CVE
Low: uriparser security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-46142: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
first Nov 29, 2023 -
LowALAS2-2023-2364 1 CVE
Low: libarchive security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-36227: In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, whi…
first Nov 29, 2023 -
Low max 3.3ALAS2-2023-2361 1 CVE
Low: advancecomp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2961: advancecomp has a segmentation fault on invalid MNG size
first Nov 29, 2023 -
Low max 4.4ALAS2-2023-2357 1 CVE
Low: gawk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4156: A heap out-of-bounds read flaw was found in builtin.c in the gawk package which may result in a crash of the software.
first Nov 29, 2023 -
Low max 7.5ALAS2023-2023-428 1 CVE
Low: jackson-databind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-46877: jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage …
first Oct 30, 2023 -
LowALAS2023-2023-414 1 CVE
Low: vorbis-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43361: Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conver…
first Oct 30, 2023 -
Low max 7.5ALAS2023-2023-407 1 CVE
Low: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5156: A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application cra…
first Oct 30, 2023 -
Low max 7.8ALAS2023-2023-403 2 CVEs
Low: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5535: Use After Free in GitHub repository vim/vim prior to v9.0.2010. CVE-2023-5441: NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace3…
first Oct 30, 2023 -
LowALAS2-2023-2333 1 CVE
Low: nmap security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-15173: Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption and application crash) via a craft…
first Oct 30, 2023 -
Low max 7.8ALAS2-2023-2319 2 CVEs
Low: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5535: Use After Free in GitHub repository vim/vim prior to v9.0.2010. CVE-2023-5441: NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e…
first Oct 30, 2023 -
LowALAS2023-2023-395 0 CVEs
Low: containerd security update (Amazon Linux 2023)
first Oct 18, 2023 -
LowALAS2-2023-2279 0 CVEs
Low: libarchive security update (Amazon Linux 2)
first Sep 27, 2023 -
Low max 4.7ALAS2-2023-2247 1 CVE
Low: shadow-utils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4641: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow…
first Sep 13, 2023 -
LowALAS2023-2023-333 1 CVE
Low: file security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48554: File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.
first Aug 31, 2023 -
Low max 4.4ALAS2023-2023-292 1 CVE
Low: gawk security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-4156: A heap out-of-bounds read flaw was found in builtin.c in the gawk package which may result in a crash of the software.
first Aug 17, 2023 -
LowALAS2-2023-2213 1 CVE
Low: wavpack security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2476: A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ====================================…
first Aug 17, 2023 -
LowALAS2023-2023-286 1 CVE
Low: pcre2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-41409: Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
first Aug 3, 2023 -
Low max 3.7ALAS2-2023-2188 1 CVE
Low: python-configobj security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-26112: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Not…
first Aug 3, 2023 -
LowALAS2-2023-2197 1 CVE
Low: elfutils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-33294: In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite lo…
first Aug 3, 2023 -
LowALAS2-2023-2170 1 CVE
Low: libvncserver security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-29260: libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
first Jul 20, 2023 -
LowALAS2-2023-2169 4 CVEs
Low: qemu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3595: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could oc…
first Jul 20, 2023 -
LowALAS2023-2023-246 1 CVE
Low: libarchive security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-36227: In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, …
first Jul 5, 2023 -
Low max 3.5ALAS2023-2023-262 1 CVE
Low: bluez security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3563: A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgm…
first Jul 17, 2023 -
Low max 3.9
Low: open-vm-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of t…
first Jul 17, 2023 -
Low max 3.7ALAS2023-2023-254 1 CVE
Low: python-configobj security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-26112: All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **…
first Jul 17, 2023 -
Low max 7.3ALAS2023-2023-247 1 CVE
Low: perl-HTTP-Daemon security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-31081: HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited …
first Jul 5, 2023 -
Low max 6.5ALAS2-2023-2113 1 CVE
Low: wireshark security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-0667: Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual configuration, is su…
first Jul 5, 2023 -
LowALAS2-2023-2136 1 CVE
Low: libcap security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2602: libcap is vulnerable to a denial of service caused by the error handling in wrap_pthread_create() function, which will cause memory to be leaked in the cas…
first Jul 17, 2023 -
Low max 3.9
Low: open-vm-tools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the …
first Jul 17, 2023 -
Low max 6.5ALAS2023-2023-224 1 CVE
Low: screen security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-24626: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to …
first Jun 21, 2023 -
LowALAS2023-2023-202 1 CVE
Low: gnuplot security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-44917: A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application …
first Jun 5, 2023