AWS Security Advisories · September 2012 — AWS Security Advisories
11 advisories 22 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2012-09. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2012-119

ALAS · AL1ExploitedVulnCheck KEV listedImportant2012-09-04

ALAS-2012-119: java-1.6.0-openjdk (important)

CVEs:CVE-2012-0547CVE-2012-1682

Affected products

ProductStatusVendorPackageEcosystem
java-1.6.0-openjdk affected Amazon java-1.6.0-openjdk —
Upstream advisory

ALAS-2012-128

ALAS · AL1Active exploitation (sightings)Medium2012-09-22

ALAS-2012-128: dbus (medium)

CVEs:CVE-2012-3524

Affected products

ProductStatusVendorPackageEcosystem
dbus affected Amazon dbus —
Upstream advisory

ALAS-2012-121

ALAS · AL1PoC exploitMedium2012-09-04

ALAS-2012-121: postgresql9 (medium)

CVEs:CVE-2012-3488

Affected products

ProductStatusVendorPackageEcosystem
postgresql9 affected Amazon postgresql9 —
Upstream advisory

ALAS-2012-127

ALAS · AL1EPSS <= 49%Medium2012-09-22

ALAS-2012-127: ghostscript (medium)

CVEs:CVE-2012-4405

Affected products

ProductStatusVendorPackageEcosystem
ghostscript affected Amazon ghostscript —
Upstream advisory

ALAS-2012-125

ALAS · AL1EPSS <= 49%Important2012-09-22

ALAS-2012-125: openjpeg (important)

CVEs:CVE-2012-3535

Affected products

ProductStatusVendorPackageEcosystem
openjpeg affected Amazon openjpeg —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.