AWS Security Advisories · January 2016 — AWS Security Advisories
11 advisories 15 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2016-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2016-642

ALAS · AL1ExploitedVulnCheck KEV listedMedium2016-01-19

ALAS-2016-642: kernel (medium)

CVEs:CVE-2016-0728

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Amazon kernel —
Upstream advisory

ALAS-2016-632

ALAS · AL1PoC exploitLow2016-01-18

ALAS-2016-632: ruby19, ruby20, ruby21, ruby22 (low)

CVEs:CVE-2015-7551

Affected products

ProductStatusVendorPackageEcosystem
ruby19, ruby20, ruby21, ruby22 affected Amazon ruby19, ruby20, ruby21, ruby22 —
Upstream advisory

ALAS-2016-640

ALAS · AL1Coalition ESS < 30%Medium2016-01-18

ALAS-2016-640: php56, php55 (medium)

CVEs:CVE-2016-1903

Affected products

ProductStatusVendorPackageEcosystem
php56, php55 affected Amazon php56, php55 —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.