AWS Security Advisories · May 2014 — AWS Security Advisories
12 advisories 15 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2014-05. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2014-339

ALAS · AL1ExploitedCISA KEV listedMedium2014-05-13

ALAS-2014-339: kernel (medium)

CVEs:CVE-2014-0196

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Amazon kernel
Upstream advisory

ALAS-2014-338

ALAS · AL1Weaponized exploitMedium2014-05-13

ALAS-2014-338: cyrus-sasl (medium)

CVEs:CVE-2013-4122

Affected products

ProductStatusVendorPackageEcosystem
cyrus-sasl affected Amazon cyrus-sasl
Upstream advisory

ALAS-2014-345

ALAS · AL1EPSS <= 49%Medium2014-05-21

ALAS-2014-345: elfutils (medium)

CVEs:CVE-2014-0172

Affected products

ProductStatusVendorPackageEcosystem
elfutils affected Amazon elfutils
Upstream advisory

ALAS-2014-334

ALAS · AL1EPSS <= 49%Medium2014-05-06

ALAS-2014-334: mod24_security (medium)

CVEs:CVE-2013-5705

Affected products

ProductStatusVendorPackageEcosystem
mod24_security affected Amazon mod24_security
Upstream advisory

ALAS-2014-335

ALAS · AL1EPSS <= 49%Medium2014-05-06

ALAS-2014-335: mod_security (medium)

CVEs:CVE-2013-5705

Affected products

ProductStatusVendorPackageEcosystem
mod_security affected Amazon mod_security
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.