ALAS-2016-751
ALAS · AL1Weaponized exploitImportant2016-09-28
ALAS-2016-751: bind (important)
CVEs:CVE-2016-2776
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2016-751: bind (important)
CVEs:CVE-2016-2776
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
ALAS-2016-750: openvpn (medium)
CVEs:CVE-2016-6329
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openvpn | affected | Amazon | openvpn | — |
ALAS-2016-741: python34, python27, python26 (medium)
CVEs:CVE-2016-1000110
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python34, python27, python26 | affected | Amazon | python34, python27, python26 | — |
ALAS-2016-740: kernel (medium)
CVEs:CVE-2016-6828
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2016-749: openssl (important)
CVEs:CVE-2016-6304
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Amazon | openssl | — |
ALAS-2016-742: curl (low)
CVEs:CVE-2016-7141CVE-2016-7167
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| curl | affected | Amazon | curl | — |
ALAS-2016-747: postgresql92, postgresql93, postgresql94 (medium)
CVEs:CVE-2016-5423CVE-2016-5424
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| postgresql92, postgresql93, postgresql94 | affected | Amazon | postgresql92, postgresql93, postgresql94 | — |
ALAS-2016-748: java-1.6.0-openjdk (important)
CVEs:CVE-2016-3458CVE-2016-3500CVE-2016-3508CVE-2016-3550CVE-2016-3606
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.6.0-openjdk | affected | Amazon | java-1.6.0-openjdk | — |
ALAS-2016-745: bind (medium)
CVEs:CVE-2016-2775
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
ALAS-2016-743: libarchive (important)
CVEs:CVE-2015-8916CVE-2015-8917CVE-2015-8919CVE-2015-8920CVE-2015-8921CVE-2015-8922CVE-2015-8923CVE-2015-8924CVE-2015-8925CVE-2015-8926CVE-2015-8928CVE-2015-8930CVE-2015-8931CVE-2015-8932CVE-2015-8934CVE-2016-1541CVE-2016-4300CVE-2016-4302CVE-2016-4809CVE-2016-5418CVE-2016-5844CVE-2016-6250CVE-2016-7166
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libarchive | affected | Amazon | libarchive | — |
ALAS-2016-739: collectd (medium)
CVEs:CVE-2016-6254
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| collectd | affected | Amazon | collectd | — |
ALAS-2016-744: libgcrypt, gnupg (medium)
CVEs:CVE-2016-6313
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libgcrypt, gnupg | affected | Amazon | libgcrypt, gnupg | — |
ALAS-2016-746: lighttpd (important)
CVEs:CVE-2016-1000212
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lighttpd | affected | Amazon | lighttpd | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.