ALAS-2019-1179
ALAS · AL1Weaponized exploitImportant2019-03-20
ALAS-2019-1179: kernel (important)
CVEs:CVE-2019-8980CVE-2019-9213
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2019-1179: kernel (important)
CVEs:CVE-2019-8980CVE-2019-9213
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2019-1181: mysql57 (medium)
CVEs:CVE-2019-2420CVE-2019-2434CVE-2019-2455CVE-2019-2481CVE-2019-2482CVE-2019-2486CVE-2019-2503CVE-2019-2507CVE-2019-2510CVE-2019-2528CVE-2019-2529CVE-2019-2531CVE-2019-2532CVE-2019-2534CVE-2019-2537
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mysql57 | affected | Amazon | mysql57 | — |
ALAS-2019-1178: mysql56 (medium)
CVEs:CVE-2019-2455CVE-2019-2481CVE-2019-2482CVE-2019-2503CVE-2019-2507CVE-2019-2529CVE-2019-2531CVE-2019-2534CVE-2019-2537
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mysql56 | affected | Amazon | mysql56 | — |
ALAS-2019-1166: httpd24 (important)
CVEs:CVE-2018-17189CVE-2018-17199CVE-2019-0190
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2019-1169: python27, python34, python35, python36 (medium)
CVEs:CVE-2019-5010
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27, python34, python35, python36 | affected | Amazon | python27, python34, python35, python36 | — |
ALAS-2019-1153: openssl (low)
CVEs:CVE-2018-0734
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Amazon | openssl | — |
ALAS-2019-1180: perl (important)
CVEs:CVE-2018-18311
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| perl | affected | Amazon | perl | — |
ALAS-2019-1176: squid (medium)
CVEs:CVE-2018-19132
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| squid | affected | Amazon | squid | — |
ALAS-2019-1174: libwmf (low)
CVEs:CVE-2019-6978
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libwmf | affected | Amazon | libwmf | — |
ALAS-2019-1172: golang (medium)
CVEs:CVE-2019-6486
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Amazon | golang | — |
ALAS-2019-1186: file (medium)
CVEs:CVE-2019-8904CVE-2019-8905CVE-2019-8906CVE-2019-8907
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| file | affected | Amazon | file | — |
ALAS-2019-1177: java-1.7.0-openjdk (medium)
CVEs:CVE-2019-2422
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.7.0-openjdk | affected | Amazon | java-1.7.0-openjdk | — |
ALAS-2019-1167: kernel (important)
CVEs:CVE-2019-8912
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2019-1182: nvidia (low)
CVEs:CVE-2018-6260
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nvidia | affected | Amazon | nvidia | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.