🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2023-7104 CVE-2023-0767 CVE-2019-11729 CVE-2019-11745 CVE-2020-25648 CVE-2019-11719 CVE-2019-11727 +11 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-409 Related CVEs: CVE-2023-4692 CVE-2023-4693 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-2601 CVE-2022-28733 +12 more Upstream summary: An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-662 Related CVEs: CVE-2024-34069 CVE-2023-25577 CVE-2023-23934 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-495 Related CVEs: CVE-2023-51764 Upstream summary: Postfix through 3.8.4 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-172 Related CVEs: CVE-2022-44370 CVE-2023-38665 CVE-2020-21528 Upstream summary: NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856 (CVE-2022-44370) Table of contents Symptom & Impact […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-198 Related CVEs: CVE-2022-4904 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 CVE-2024-25629 Upstream summary: A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2024-626 Related CVEs: CVE-2024-2314 Upstream summary: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2602 Related CVEs: CVE-2024-6655 Upstream summary: gtk3: gtk2: Library injection from CWD (CVE-2024-6655) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2024-028 Related CVEs: CVE-2024-1086 CVE-2024-23849 Upstream summary: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2024-189 Related CVEs: CVE-2024-39480 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete (CVE-2024-39480) Table of contents Symptom & Impact Environment […]
