AWS Security Advisories · February 2016 — AWS Security Advisories
13 advisories 27 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2016-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2016-653

ALAS · AL1ExploitedVulnCheck KEV listedCritical2016-02-16

ALAS-2016-653: glibc (critical)

CVEs:CVE-2015-7547

Affected products

ProductStatusVendorPackageEcosystem
glibc affected Amazon glibc —
Upstream advisory

ALAS-2016-644

ALAS · AL1PoC exploitMedium2016-02-09

ALAS-2016-644: python-rsa (medium)

CVEs:CVE-2016-1494

Affected products

ProductStatusVendorPackageEcosystem
python-rsa affected Amazon python-rsa —
Upstream advisory

ALAS-2016-650

ALAS · AL1EPSS <= 49%Medium2016-02-09

ALAS-2016-650: mod24_nss (medium)

CVEs:CVE-2015-5244

Affected products

ProductStatusVendorPackageEcosystem
mod24_nss affected Amazon mod24_nss —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.