Amazon Linux 2

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2551 Related CVEs: CVE-2024-2314 Upstream summary: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2924 Related CVEs: CVE-2025-32462 CVE-2024-31969 CVE-2023-22809 CVE-2021-3156 CVE-2019-18634 CVE-2017-1000367 CVE-2017-1000368 CVE-2019-14287  +3 more Upstream summary: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2287 Related CVEs: CVE-2023-38545 CVE-2023-38546 CVE-2023-38039 CVE-2018-1000300 CVE-2018-1000301 CVE-2018-1000005 CVE-2018-1000007 CVE-2025-10966  +12 more Upstream summary: An issue was found in curl that can cause a buffer overflow in its SOCKS5 […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3143 Related CVEs: CVE-2025-13151 CVE-2021-46848 CVE-2024-12133 Upstream summary: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2899 Related CVEs: CVE-2025-48734 CVE-2019-10086 Upstream summary: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2PYTHON3.8-2025-018 Related CVEs: CVE-2001-1267 CVE-2007-4559 CVE-2024-35195 CVE-2024-3651 CVE-2024-37891 Upstream summary: Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2677 Related CVEs: CVE-2024-39936 Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. […]