ALAS-2014-365
ALAS · AL1Medium2014-06-26
ALAS-2014-365: libtiff (medium)
CVEs:CVE-2013-4231CVE-2013-4232CVE-2013-4243CVE-2013-4244
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libtiff | affected | Amazon | libtiff | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
ALAS-2014-365: libtiff (medium)
CVEs:CVE-2013-4231CVE-2013-4232CVE-2013-4243CVE-2013-4244
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libtiff | affected | Amazon | libtiff | — |
ALAS-2014-364: nrpe (important)
CVEs:CVE-2014-2913
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nrpe | affected | Amazon | nrpe | — |
ALAS-2014-363: kernel (medium)
CVEs:CVE-2014-3153
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2014-361: php54 (medium)
CVEs:CVE-2014-0237CVE-2014-0238
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php54 | affected | Amazon | php54 | — |
ALAS-2014-362: php55 (medium)
CVEs:CVE-2014-0237CVE-2014-0238
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php55 | affected | Amazon | php55 | — |
ALAS-2014-359: libtasn1 (medium)
CVEs:CVE-2014-3467CVE-2014-3468CVE-2014-3469
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libtasn1 | affected | Amazon | libtasn1 | — |
ALAS-2014-360: squid (medium)
CVEs:CVE-2014-0128
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| squid | affected | Amazon | squid | — |
ALAS-2014-357: readline (low)
CVEs:CVE-2014-2524
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| readline | affected | Amazon | readline | — |
ALAS-2014-358: perl-Capture-Tiny (low)
CVEs:CVE-2014-1875
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| perl-Capture-Tiny | affected | Amazon | perl-Capture-Tiny | — |
ALAS-2014-355: glibc (low)
CVEs:CVE-2013-4588
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| glibc | affected | Amazon | glibc | — |
ALAS-2014-356: perltidy (low)
CVEs:CVE-2014-2277
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| perltidy | affected | Amazon | perltidy | — |
ALAS-2014-354: pam (medium)
CVEs:CVE-2013-7041CVE-2014-2583
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| pam | affected | Amazon | pam | — |
ALAS-2014-353: libmicrohttpd (important)
CVEs:CVE-2013-7038CVE-2013-7039
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libmicrohttpd | affected | Amazon | libmicrohttpd | — |
ALAS-2014-350: openssl098e (important)
CVEs:CVE-2014-0224
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl098e | affected | Amazon | openssl098e | — |
ALAS-2014-351: openssl097a (important)
CVEs:CVE-2014-0224
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl097a | affected | Amazon | openssl097a | — |
ALAS-2014-352: gnutls (important)
CVEs:CVE-2014-3466
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gnutls | affected | Amazon | gnutls | — |
ALAS-2014-349: openssl (important)
CVEs:CVE-2010-5298CVE-2014-0195CVE-2014-0198CVE-2014-0221CVE-2014-0224CVE-2014-3470CVE-2015-0292
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Amazon | openssl | — |
ALAS-2014-348: munin (low)
CVEs:CVE-2013-6048CVE-2013-6359
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| munin | affected | Amazon | munin | — |
ALAS-2014-347: cacti (medium)
CVEs:CVE-2014-2326CVE-2014-2327CVE-2014-2328CVE-2014-2708CVE-2014-2709
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cacti | affected | Amazon | cacti | — |
ALAS-2014-346: lighttpd (medium)
CVEs:CVE-2014-2323CVE-2014-2324
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lighttpd | affected | Amazon | lighttpd | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.