Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.
ALAS-2017-917: java-1.8.0-openjdk (critical)
CVEs:CVE-2017-10274CVE-2017-10281CVE-2017-10285CVE-2017-10295CVE-2017-10345CVE-2017-10346CVE-2017-10347CVE-2017-10348CVE-2017-10349CVE-2017-10350CVE-2017-10355CVE-2017-10356CVE-2017-10357CVE-2017-10388
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2017-916: wget (important)
CVEs:CVE-2017-13089CVE-2017-13090
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| wget | affected | Amazon | wget | — |
ALAS-2017-915: ruby24 (medium)
CVEs:CVE-2017-0898CVE-2017-0899CVE-2017-0900CVE-2017-0901CVE-2017-0902CVE-2017-0903CVE-2017-10784CVE-2017-14033CVE-2017-14064
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby24 | affected | Amazon | ruby24 | — |
ALAS-2017-914: kernel (important)
CVEs:CVE-2017-1000251CVE-2017-12154CVE-2017-12192CVE-2017-14340CVE-2017-14991CVE-2017-15274
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2017-913: tomcat8, tomcat80, tomcat7 (important)
CVEs:CVE-2017-12617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8, tomcat80, tomcat7 | affected | Amazon | tomcat8, tomcat80, tomcat7 | — |
ALAS-2017-912: emacs (important)
CVEs:CVE-2017-14482
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| emacs | affected | Amazon | emacs | — |
ALAS-2017-911: nss (important)
CVEs:CVE-2017-7805
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nss | affected | Amazon | nss | — |
ALAS-2017-910: git (medium)
CVEs:CVE-2017-14867
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| git | affected | Amazon | git | — |
ALAS-2017-909: samba (medium)
CVEs:CVE-2017-12150CVE-2017-12151CVE-2017-12163
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| samba | affected | Amazon | samba | — |
ALAS-2017-908: postgresql96 (medium)
CVEs:CVE-2017-7546CVE-2017-7547
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| postgresql96 | affected | Amazon | postgresql96 | — |
ALAS-2017-898: openssh (medium)
CVEs:CVE-2016-10009CVE-2016-10011CVE-2016-10012CVE-2016-6210CVE-2016-6515
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssh | affected | Amazon | openssh | — |
ALAS-2017-899: nagios (important)
CVEs:CVE-2008-4796CVE-2008-7313CVE-2013-4214CVE-2013-7108CVE-2013-7205CVE-2014-1878CVE-2014-5008CVE-2014-5009CVE-2016-9566
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nagios | affected | Amazon | nagios | — |
ALAS-2017-900: file (important)
CVEs:CVE-2017-1000249
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| file | affected | Amazon | file | — |
ALAS-2017-901: kernel (medium)
CVEs:CVE-2017-14497CVE-2017-7558
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2017-907: dnsmasq (critical)
CVEs:CVE-2017-14491CVE-2017-14492CVE-2017-14493CVE-2017-14494CVE-2017-14495CVE-2017-14496
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| dnsmasq | affected | Amazon | dnsmasq | — |
ALAS-2017-906: ruby22, ruby23 (medium)
CVEs:CVE-2015-9096CVE-2017-0898CVE-2017-0899CVE-2017-0900CVE-2017-0901CVE-2017-0902CVE-2017-0903CVE-2017-10784CVE-2017-14033CVE-2017-14064
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ruby22, ruby23 | affected | Amazon | ruby22, ruby23 | — |
ALAS-2017-905: 389-ds-base (medium)
CVEs:CVE-2017-7551
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2017-904: cacti (medium)
CVEs:CVE-2017-12927CVE-2017-12978
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cacti | affected | Amazon | cacti | — |
ALAS-2017-903: tomcat7, tomcat8 (medium)
CVEs:CVE-2017-7674
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7, tomcat8 | affected | Amazon | tomcat7, tomcat8 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.