AWS Security Advisories · July 2016 — AWS Security Advisories
7 advisories 29 CVEs

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2016-07. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2016-725

ALAS · AL1Weaponized exploitImportant2016-07-20

ALAS-2016-725: httpd24, httpd (important)

CVEs:CVE-2016-5387

Affected products

ProductStatusVendorPackageEcosystem
httpd24, httpd affected Amazon httpd24, httpd
Upstream advisory

ALAS-2016-722

ALAS · AL1Weaponized exploitMedium2016-07-20

ALAS-2016-722: tomcat6, tomcat7, tomcat8 (medium)

CVEs:CVE-2016-5388

Affected products

ProductStatusVendorPackageEcosystem
tomcat6, tomcat7, tomcat8 affected Amazon tomcat6, tomcat7, tomcat8
Upstream advisory

ALAS-2016-721

ALAS · AL1PoC exploitImportant2016-07-14

ALAS-2016-721: varnish (important)

CVEs:CVE-2015-8852

Affected products

ProductStatusVendorPackageEcosystem
varnish affected Amazon varnish
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.