ALAS-2013-249
ALAS · AL1ExploitedCISA KEV listedImportant2013-12-02
ALAS-2013-249: nginx (important)
CVEs:CVE-2013-4547
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nginx | affected | Amazon | nginx | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2013-249: nginx (important)
CVEs:CVE-2013-4547
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nginx | affected | Amazon | nginx | — |
ALAS-2013-262: php (critical)
CVEs:CVE-2013-6420
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php | affected | Amazon | php | — |
ALAS-2013-263: php54 (critical)
CVEs:CVE-2013-6420
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php54 | affected | Amazon | php54 | — |
ALAS-2013-264: php55 (critical)
CVEs:CVE-2013-6420
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php55 | affected | Amazon | php55 | — |
ALAS-2013-270: glibc (medium)
CVEs:CVE-2013-0242CVE-2013-1914CVE-2013-4332
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| glibc | affected | Amazon | glibc | — |
ALAS-2013-259: sudo (low)
CVEs:CVE-2013-1775CVE-2013-2776CVE-2013-2777
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sudo | affected | Amazon | sudo | — |
ALAS-2013-265: nss (important)
CVEs:CVE-2013-1620CVE-2013-1739CVE-2013-1741CVE-2013-5605CVE-2013-5606CVE-2013-5607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nss | affected | Amazon | nss | — |
ALAS-2013-266: nspr (important)
CVEs:CVE-2013-1620CVE-2013-1739CVE-2013-1741CVE-2013-5605CVE-2013-5606CVE-2013-5607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nspr | affected | Amazon | nspr | — |
ALAS-2013-267: libjpeg-turbo (medium)
CVEs:CVE-2013-6629CVE-2013-6630
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libjpeg-turbo | affected | Amazon | libjpeg-turbo | — |
ALAS-2013-252: kernel (medium)
CVEs:CVE-2013-4348CVE-2013-4470
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2013-269: subversion (medium)
CVEs:CVE-2013-4505CVE-2013-4558
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| subversion | affected | Amazon | subversion | — |
ALAS-2013-261: coreutils (low)
CVEs:CVE-2013-0221CVE-2013-0222CVE-2013-0223
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| coreutils | affected | Amazon | coreutils | — |
ALAS-2013-251: wireshark (medium)
CVEs:CVE-2012-2392CVE-2012-3825CVE-2012-4285CVE-2012-4288CVE-2012-4289CVE-2012-4290CVE-2012-4291CVE-2012-4292CVE-2012-5595CVE-2012-5597CVE-2012-5598CVE-2012-5599CVE-2012-5600CVE-2012-6056CVE-2012-6059CVE-2012-6060CVE-2012-6061CVE-2012-6062CVE-2013-3557CVE-2013-3559CVE-2013-3561CVE-2013-4081CVE-2013-4083CVE-2013-4927CVE-2013-4931CVE-2013-4932CVE-2013-4933CVE-2013-4934CVE-2013-4935CVE-2013-4936CVE-2013-5721
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| wireshark | affected | Amazon | wireshark | — |
ALAS-2013-268: ganglia (medium)
CVEs:CVE-2013-6395
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ganglia | affected | Amazon | ganglia | — |
ALAS-2013-256: openmpi (medium)
CVEs:CVE-2012-4516CVE-2013-2561
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openmpi | affected | Amazon | openmpi | — |
ALAS-2013-253: mod_nss (medium)
CVEs:CVE-2013-4566
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mod_nss | affected | Amazon | mod_nss | — |
ALAS-2013-254: mod24_nss (medium)
CVEs:CVE-2013-4566
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mod24_nss | affected | Amazon | mod24_nss | — |
ALAS-2013-255: 389-ds-base (important)
CVEs:CVE-2013-4485
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2013-258: kernel (low)
CVEs:CVE-2013-6382
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2013-250: augeas (low)
CVEs:CVE-2012-0786CVE-2012-0787
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| augeas | affected | Amazon | augeas | — |
ALAS-2013-260: xorg-x11-server (low)
CVEs:CVE-2013-1940
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xorg-x11-server | affected | Amazon | xorg-x11-server | — |
ALAS-2013-257: dracut (medium)
CVEs:CVE-2012-4453
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dracut | affected | Amazon | dracut | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.