Amazon Linux 2

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2736 Related CVEs: CVE-2024-53580 CVE-2023-38403 CVE-2023-7250 Upstream summary: iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function. (CVE-2024-53580) Table of contents Symptom & Impact Environment & […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2731 Related CVEs: CVE-2024-12085 CVE-2024-12086 CVE-2024-12087 CVE-2024-12088 CVE-2024-12747 CVE-2022-29154 CVE-2025-10158 CVE-2022-37434 Upstream summary: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2707 Related CVEs: CVE-2024-47072 CVE-2021-21342 CVE-2022-41966 CVE-2021-39139 CVE-2021-39140 CVE-2021-39141 CVE-2021-39144 CVE-2021-39145  +12 more Upstream summary: XStream is vulnerable to a Denial of Service attack due to stack overflow from a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2966 Related CVEs: CVE-2025-7424 CVE-2024-55549 CVE-2025-24855 CVE-2023-40403 CVE-2019-11068 CVE-2019-18197 Upstream summary: A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2697 Related CVEs: CVE-2024-45321 CVE-2020-16154 Upstream summary: The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers. (CVE-2024-45321) Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2693 Related CVEs: CVE-2024-7254 CVE-2022-1941 CVE-2021-22570 Upstream summary: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2MATE-DESKTOP1.X-2025-010 Related CVEs: CVE-2025-53367 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-46312 CVE-2021-46310  +1 more Upstream summary: DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. […]