AWS Security Advisories · June 2013 — AWS Security Advisories
11 advisories 49 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2013-06. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2013-204

ALAS · AL1ExploitedCISA KEV listedImportant2013-06-20

ALAS-2013-204: java-1.7.0-openjdk (important)

CVEs:CVE-2013-1500CVE-2013-1571CVE-2013-2407CVE-2013-2412CVE-2013-2443CVE-2013-2444CVE-2013-2445CVE-2013-2446CVE-2013-2447CVE-2013-2448CVE-2013-2449CVE-2013-2450CVE-2013-2452CVE-2013-2453CVE-2013-2454CVE-2013-2455CVE-2013-2456CVE-2013-2457CVE-2013-2458CVE-2013-2459CVE-2013-2460CVE-2013-2461CVE-2013-2463CVE-2013-2465CVE-2013-2469CVE-2013-2470CVE-2013-2471CVE-2013-2472CVE-2013-2473

Affected products

ProductStatusVendorPackageEcosystem
java-1.7.0-openjdk affected Amazon java-1.7.0-openjdk —
Upstream advisory

ALAS-2013-203

ALAS · AL1Weaponized exploitImportant2013-06-20

ALAS-2013-203: nrpe (important)

CVEs:CVE-2013-1362

Affected products

ProductStatusVendorPackageEcosystem
nrpe affected Amazon nrpe —
Upstream advisory

ALAS-2013-199

ALAS · AL1Weaponized exploitMedium2013-06-11

ALAS-2013-199: libtirpc (medium)

CVEs:CVE-2013-1950

Affected products

ProductStatusVendorPackageEcosystem
libtirpc affected Amazon libtirpc —
Upstream advisory

ALAS-2013-196

ALAS · AL1EPSS <= 49%Important2013-06-11

ALAS-2013-196: tomcat6 (important)

CVEs:CVE-2013-1976

Affected products

ProductStatusVendorPackageEcosystem
tomcat6 affected Amazon tomcat6 —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.