AWS Security Advisories · May 2012 — AWS Security Advisories
11 advisories 16 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2012-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2012-77

ALAS · AL1ExploitedCISA KEV listedCritical2012-05-09

ALAS-2012-77: php (critical)

CVEs:CVE-2012-1823

Affected products

ProductStatusVendorPackageEcosystem
php affected Amazon php —
Upstream advisory

ALAS-2012-73

ALAS · AL1Weaponized exploitImportant2012-05-02

ALAS-2012-73: openssl098e (important)

CVEs:CVE-2012-2110

Affected products

ProductStatusVendorPackageEcosystem
openssl098e affected Amazon openssl098e —
Upstream advisory

ALAS-2012-72

ALAS · AL1Weaponized exploitImportant2012-05-02

ALAS-2012-72: openssl (important)

CVEs:CVE-2012-2110

Affected products

ProductStatusVendorPackageEcosystem
openssl affected Amazon openssl —
Upstream advisory

ALAS-2012-74

ALAS · AL1PoC exploitImportant2012-05-08

ALAS-2012-74: nginx (important)

CVEs:CVE-2012-2089

Affected products

ProductStatusVendorPackageEcosystem
nginx affected Amazon nginx —
Upstream advisory

ALAS-2012-81

ALAS · AL1EPSS <= 49%Medium2012-05-21

ALAS-2012-81: python27 (medium)

CVEs:CVE-2012-0845

Affected products

ProductStatusVendorPackageEcosystem
python27 affected Amazon python27 —
Upstream advisory

ALAS-2012-80

ALAS · AL1EPSS <= 49%Medium2012-05-21

ALAS-2012-80: python26 (medium)

CVEs:CVE-2012-0845

Affected products

ProductStatusVendorPackageEcosystem
python26 affected Amazon python26 —
Upstream advisory

ALAS-2012-79

ALAS · AL1EPSS <= 49%Medium2012-05-21

ALAS-2012-79: rubygems (medium)

CVEs:CVE-2012-2125

Affected products

ProductStatusVendorPackageEcosystem
rubygems affected Amazon rubygems —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.