🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1976 Related CVEs: CVE-2022-25857 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 Upstream summary: The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-057 Related CVEs: CVE-2021-33909 CVE-2021-33034 Upstream summary: No CVE associated with this advisory Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2019-1154 Related CVEs: CVE-2018-19115 CVE-2021-44225 CVE-2018-19044 Upstream summary: Heap-based buffer overflow vulnerability in extract_status_code() function in lib/html.c that parses HTTP status code returned from web server allows malicious web server […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-074 Related CVEs: CVE-2021-4002 CVE-2021-43267 CVE-2021-41073 Upstream summary: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2NITRO-ENCLAVES-2022-018 Related CVEs: CVE-2022-0778 Upstream summary: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1966 Related CVEs: CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 CVE-2022-44729 CVE-2022-44730 Upstream summary: Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2173 Related CVEs: CVE-2020-21682 CVE-2021-32280 CVE-2021-3561 CVE-2019-19746 CVE-2019-19797 Upstream summary: 2023-08-03: CVE-2021-32280 was added to this advisory. A global buffer overflow in the set_fill component in genge.c of fig2dev 3.2.7b […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1880 Related CVEs: CVE-2021-36374 Upstream summary: When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1740 Related CVEs: CVE-2016-6893 CVE-2021-42097 CVE-2021-44227 CVE-2021-43331 CVE-2021-43332 CVE-2018-0618 CVE-2018-13796 CVE-2018-5950 Upstream summary: Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1803 Related CVEs: CVE-2014-3634 CVE-2022-24903 CVE-2019-17041 CVE-2019-17042 CVE-2018-16881 Upstream summary: A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, […]
