ALAS-2017-861
ALAS · AL1Important2017-07-25
ALAS-2017-861: aws-cfn-bootstrap (important)
CVEs:CVE-2017-9450
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aws-cfn-bootstrap | affected | Amazon | aws-cfn-bootstrap | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
ALAS-2017-861: aws-cfn-bootstrap (important)
CVEs:CVE-2017-9450
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aws-cfn-bootstrap | affected | Amazon | aws-cfn-bootstrap | — |
ALAS-2017-860: java-1.8.0-openjdk (critical)
CVEs:CVE-2017-10053CVE-2017-10067CVE-2017-10074CVE-2017-10090CVE-2017-10096CVE-2017-10101CVE-2017-10102CVE-2017-10107CVE-2017-10108CVE-2017-10109CVE-2017-10110CVE-2017-10111CVE-2017-10115CVE-2017-10116CVE-2017-10135CVE-2017-10193CVE-2017-10198
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2017-859: c-ares (medium)
CVEs:CVE-2017-1000381
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| c-ares | affected | Amazon | c-ares | — |
ALAS-2017-858: bind (important)
CVEs:CVE-2017-3142CVE-2017-3143
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
ALAS-2017-857: golang (medium)
CVEs:CVE-2017-8932
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Amazon | golang | — |
ALAS-2017-856: mercurial (important)
CVEs:CVE-2017-9462
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mercurial | affected | Amazon | mercurial | — |
ALAS-2017-855: sudo (medium)
CVEs:CVE-2017-1000368
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sudo | affected | Amazon | sudo | — |
ALAS-2017-854: tomcat8 (important)
CVEs:CVE-2017-5664
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2017-853: tomcat7 (important)
CVEs:CVE-2017-5664
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.