ALAS-2014-370
ALAS · AL1ExploitedCISA KEV listedImportant2014-07-09
ALAS-2014-370: chkrootkit (important)
CVEs:CVE-2014-0476
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chkrootkit | affected | Amazon | chkrootkit | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2014-370: chkrootkit (important)
CVEs:CVE-2014-0476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chkrootkit | affected | Amazon | chkrootkit | — |
ALAS-2014-389: httpd24 (important)
CVEs:CVE-2014-0118CVE-2014-0226CVE-2014-0231
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2014-388: httpd (important)
CVEs:CVE-2014-0118CVE-2014-0226CVE-2014-0231
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd | affected | Amazon | httpd | — |
ALAS-2014-372: php55 (medium)
CVEs:CVE-2014-0207CVE-2014-3478CVE-2014-3479CVE-2014-3480CVE-2014-3487CVE-2014-3515CVE-2014-3981CVE-2014-4049
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php55 | affected | Amazon | php55 | — |
ALAS-2014-367: php54 (medium)
CVEs:CVE-2014-0207CVE-2014-3478CVE-2014-3479CVE-2014-3480CVE-2014-3487CVE-2014-3515CVE-2014-3981CVE-2014-4049
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php54 | affected | Amazon | php54 | — |
ALAS-2014-368: kernel (medium)
CVEs:CVE-2014-0206CVE-2014-4014CVE-2014-4508CVE-2014-4608
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2014-382: file (medium)
CVEs:CVE-2014-0207CVE-2014-0237CVE-2014-0238CVE-2014-3478CVE-2014-3479CVE-2014-3480CVE-2014-3487CVE-2014-3538
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| file | affected | Amazon | file | — |
ALAS-2014-380: python27 (medium)
CVEs:CVE-2014-4616
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27 | affected | Amazon | python27 | — |
ALAS-2014-374: python-simplejson (low)
CVEs:CVE-2014-4616
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-simplejson | affected | Amazon | python-simplejson | — |
ALAS-2014-387: java-1.6.0-openjdk (important)
CVEs:CVE-2014-2490CVE-2014-4209CVE-2014-4216CVE-2014-4218CVE-2014-4219CVE-2014-4244CVE-2014-4252CVE-2014-4262CVE-2014-4263CVE-2014-4266
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.6.0-openjdk | affected | Amazon | java-1.6.0-openjdk | — |
ALAS-2014-383: java-1.7.0-openjdk (critical)
CVEs:CVE-2014-2483CVE-2014-2490CVE-2014-4209CVE-2014-4216CVE-2014-4218CVE-2014-4219CVE-2014-4221CVE-2014-4223CVE-2014-4244CVE-2014-4252CVE-2014-4262CVE-2014-4263CVE-2014-4266
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.7.0-openjdk | affected | Amazon | java-1.7.0-openjdk | — |
ALAS-2014-369: openssh (medium)
CVEs:CVE-2014-2532CVE-2014-2653
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssh | affected | Amazon | openssh | — |
ALAS-2014-376: mod_wsgi (important)
CVEs:CVE-2014-0240CVE-2014-0242
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mod_wsgi | affected | Amazon | mod_wsgi | — |
ALAS-2014-375: mod24_wsgi (important)
CVEs:CVE-2014-0240CVE-2014-0242
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mod24_wsgi | affected | Amazon | mod24_wsgi | — |
ALAS-2014-384: nspr (critical)
CVEs:CVE-2014-1545
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nspr | affected | Amazon | nspr | — |
ALAS-2014-385: nss (critical)
CVEs:CVE-2014-1544
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nss | affected | Amazon | nss | — |
ALAS-2014-390: transmission (medium)
CVEs:CVE-2014-4909
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| transmission | affected | Amazon | transmission | — |
ALAS-2014-373: lzo (medium)
CVEs:CVE-2014-4607
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lzo | affected | Amazon | lzo | — |
ALAS-2014-366: chrony (low)
CVEs:CVE-2014-0021
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrony | affected | Amazon | chrony | — |
ALAS-2014-386: dovecot (medium)
CVEs:CVE-2014-3430
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dovecot | affected | Amazon | dovecot | — |
ALAS-2014-379: gnupg2 (medium)
CVEs:CVE-2014-4617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gnupg2 | affected | Amazon | gnupg2 | — |
ALAS-2014-378: gnupg (medium)
CVEs:CVE-2014-4617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gnupg | affected | Amazon | gnupg | — |
ALAS-2014-377: php-ZendFramework (important)
CVEs:CVE-2014-2681CVE-2014-2682CVE-2014-2683CVE-2014-2684CVE-2014-2685
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php-ZendFramework | affected | Amazon | php-ZendFramework | — |
ALAS-2014-381: cacti (medium)
CVEs:CVE-2014-4002
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cacti | affected | Amazon | cacti | — |
ALAS-2014-371: python-jinja2 (medium)
CVEs:CVE-2014-1402
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-jinja2 | affected | Amazon | python-jinja2 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.