Amazon Linux 2

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1434 Related CVEs: CVE-2019-18397 CVE-2022-25308 CVE-2022-25310 CVE-2022-25309 Upstream summary: A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1439 Related CVEs: CVE-2019-20044 CVE-2021-45444 CVE-2018-0502 CVE-2018-13259 CVE-2018-1071 CVE-2018-1083 CVE-2018-1100 CVE-2017-18205  +3 more Upstream summary: In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1417 Related CVEs: CVE-2019-15605 CVE-2018-12121 CVE-2018-7159 Upstream summary: HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed (CVE-2019-15605) Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1420 Related CVEs: CVE-2020-5208 Upstream summary: It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1422 Related CVEs: CVE-2020-10188 Upstream summary: utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1411 Related CVEs: CVE-2019-15690 CVE-2018-15127 CVE-2026-32853 CVE-2026-32854 CVE-2018-7225 CVE-2020-29260 Upstream summary: Integer Overflow or Wraparound leads to Heap-based Buffer Overflow (CVE-2019-15690) Table of contents Symptom & Impact Environment & Reproduction […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1375 Related CVEs: CVE-2019-13616 CVE-2019-14906 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577  +5 more Upstream summary: A heap-based buffer overflow flaw, in SDL while copying an existing surface into a new […]