AWS Security Advisories · June 2018 — AWS Security Advisories
10 advisories 17 CVEs 4 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2018-06. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 4 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2018-1039

ALAS · AL1ExploitedVulnCheck KEV listedImportant2018-06-08

ALAS-2018-1039: java-1.8.0-openjdk (important)

CVEs:CVE-2018-3639

Affected products

ProductStatusVendorPackageEcosystem
java-1.8.0-openjdk affected Amazon java-1.8.0-openjdk —
Upstream advisory

ALAS-2018-1037

ALAS · AL1ExploitedVulnCheck KEV listedImportant2018-06-08

ALAS-2018-1037: java-1.7.0-openjdk (important)

CVEs:CVE-2018-3639

Affected products

ProductStatusVendorPackageEcosystem
java-1.7.0-openjdk affected Amazon java-1.7.0-openjdk —
Upstream advisory

ALAS-2018-1036

ALAS · AL1Coalition ESS < 30%Important2018-06-08

ALAS-2018-1036: 389-ds-base (important)

CVEs:CVE-2018-1089

Affected products

ProductStatusVendorPackageEcosystem
389-ds-base affected Amazon 389-ds-base —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.