Amazon Linux

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3238 Related CVEs: CVE-2026-33952 CVE-2026-33977 CVE-2026-33983 CVE-2026-33984 CVE-2026-33985 CVE-2026-33986 CVE-2026-25941 CVE-2026-25942  +12 more Upstream summary: DoS via WINPR_ASSERT in rts_read_auth_verifier_no_checks NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4v4p-9v5x-hc93 (CVE-2026-33952) DoS via WINPR_ASSERT in IMA ADPCM audio […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1618 Related CVEs: CVE-2026-0672 CVE-2026-3644 CVE-2026-4519 CVE-2026-4786 CVE-2026-6100 CVE-2025-11468 CVE-2025-15282 CVE-2026-0865  +12 more Upstream summary: The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3168 Related CVEs: CVE-2025-68160 CVE-2025-69420 CVE-2025-69421 CVE-2026-22796 CVE-2022-4304 CVE-2023-0215 CVE-2023-0286 CVE-2022-0778  +12 more Upstream summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3214 Related CVEs: CVE-2026-31958 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2026-35536 CVE-2025-47287 CVE-2023-28370 Upstream summary: Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2020-1411 Related CVEs: CVE-2019-15690 CVE-2018-15127 CVE-2026-32853 CVE-2026-32854 CVE-2018-7225 CVE-2020-29260 Upstream summary: Integer Overflow or Wraparound leads to Heap-based Buffer Overflow (CVE-2019-15690) Table of contents Symptom & Impact Environment & Reproduction […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1624 Related CVEs: CVE-2021-47154 CVE-2026-40198 CVE-2026-40199 Upstream summary: Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. _pack_ipv6() does not check […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2NGINX1-2026-011 Related CVEs: CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-28753 CVE-2026-28755 CVE-2026-32647 CVE-2023-44487 CVE-2021-23017  +9 more Upstream summary: When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1081 Related CVEs: CVE-2025-20234 CVE-2025-20260 CVE-2026-20031 CVE-2025-20128 Upstream summary: A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3244 Related CVEs: CVE-2026-33416 CVE-2015-8540 CVE-2026-34757 CVE-2026-25646 CVE-2025-64505 CVE-2025-64720 CVE-2017-12652 Upstream summary: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) […]