AWS Security Advisories · March 2019 — AWS Security Advisories
14 advisories 33 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2019-03. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2019-1169

ALAS · AL1PoC exploitMedium2019-03-21

ALAS-2019-1169: python27, python34, python35, python36 (medium)

CVEs:CVE-2019-5010

Affected products

ProductStatusVendorPackageEcosystem
python27, python34, python35, python36 affected Amazon python27, python34, python35, python36 —
Upstream advisory

ALAS-2019-1172

ALAS · AL1Coalition ESS < 30%Medium2019-03-07

ALAS-2019-1172: golang (medium)

CVEs:CVE-2019-6486

Affected products

ProductStatusVendorPackageEcosystem
golang affected Amazon golang —
Upstream advisory

ALAS-2019-1177

ALAS · AL1Coalition ESS < 30%Medium2019-03-18

ALAS-2019-1177: java-1.7.0-openjdk (medium)

CVEs:CVE-2019-2422

Affected products

ProductStatusVendorPackageEcosystem
java-1.7.0-openjdk affected Amazon java-1.7.0-openjdk —
Upstream advisory

ALAS-2019-1167

ALAS · AL1Coalition ESS < 30%Important2019-03-07

ALAS-2019-1167: kernel (important)

CVEs:CVE-2019-8912

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Amazon kernel —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.