ALAS-2020-1369
ALAS · AL1Weaponized exploitImportant2020-06-03
ALAS-2020-1369: bind (important)
CVEs:CVE-2020-8616CVE-2020-8617
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2020-1369: bind (important)
CVEs:CVE-2020-8616CVE-2020-8617
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bind | affected | Amazon | bind | — |
ALAS-2020-1389: tomcat7 (important)
CVEs:CVE-2020-9484
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat7 | affected | Amazon | tomcat7 | — |
ALAS-2020-1390: tomcat8 (important)
CVEs:CVE-2020-9484
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2020-1371: ppp (important)
CVEs:CVE-2020-8597
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ppp | affected | Amazon | ppp | — |
ALAS-2020-1378: squid (important)
CVEs:CVE-2019-12519CVE-2019-12521CVE-2019-12525CVE-2020-11945
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| squid | affected | Amazon | squid | — |
ALAS-2020-1391: php-pecl-imagick (medium)
CVEs:CVE-2017-1000476CVE-2017-11166CVE-2017-12805CVE-2017-12806CVE-2017-18251CVE-2017-18252CVE-2017-18254CVE-2017-18271CVE-2017-18273CVE-2018-10177CVE-2018-10804CVE-2018-10805CVE-2018-11656CVE-2018-12599CVE-2018-12600CVE-2018-13153CVE-2018-14434CVE-2018-14435CVE-2018-14436CVE-2018-14437CVE-2018-15607CVE-2018-16328CVE-2018-16749CVE-2018-16750CVE-2018-18544CVE-2018-20467CVE-2018-8804CVE-2018-9133CVE-2019-10131CVE-2019-10650CVE-2019-11470CVE-2019-11472CVE-2019-11597CVE-2019-11598CVE-2019-12974CVE-2019-12975CVE-2019-12976CVE-2019-12978CVE-2019-12979CVE-2019-13133CVE-2019-13134CVE-2019-13135CVE-2019-13295CVE-2019-13297CVE-2019-13300CVE-2019-13301CVE-2019-13304CVE-2019-13305CVE-2019-13306CVE-2019-13307CVE-2019-13309CVE-2019-13310CVE-2019-13311CVE-2019-13454CVE-2019-14980CVE-2019-14981CVE-2019-15139CVE-2019-15140CVE-2019-15141CVE-2019-16708CVE-2019-16709CVE-2019-16710CVE-2019-16711CVE-2019-16712CVE-2019-16713CVE-2019-17540CVE-2019-17541CVE-2019-19948CVE-2019-19949CVE-2019-7175CVE-2019-7397CVE-2019-7398CVE-2019-9956
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php-pecl-imagick | affected | Amazon | php-pecl-imagick | — |
ALAS-2020-1380: exim (important)
CVEs:CVE-2020-12783
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| exim | affected | Amazon | exim | — |
ALAS-2020-1386: squid (important)
CVEs:CVE-2019-12519CVE-2019-12525CVE-2019-13345CVE-2020-11945
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| squid | affected | Amazon | squid | — |
ALAS-2020-1387: telnet (important)
CVEs:CVE-2020-10188
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| telnet | affected | Amazon | telnet | — |
ALAS-2020-1370: httpd24 (low)
CVEs:CVE-2020-1927CVE-2020-1934
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2020-1377: kernel (important)
CVEs:CVE-2019-19319CVE-2019-19768CVE-2020-10751CVE-2020-12770CVE-2020-1749
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2020-1375: python27 (medium)
CVEs:CVE-2018-20852CVE-2019-18348
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27 | affected | Amazon | python27 | — |
ALAS-2020-1373: unbound (important)
CVEs:CVE-2020-12662CVE-2020-12663
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| unbound | affected | Amazon | unbound | — |
ALAS-2020-1382: kernel (important)
CVEs:CVE-2020-10711CVE-2020-12657CVE-2020-12826
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2020-1376: docker (important)
CVEs:CVE-2020-13401
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| docker | affected | Amazon | docker | — |
ALAS-2020-1381: json-c (medium)
CVEs:CVE-2020-12762
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| json-c | affected | Amazon | json-c | — |
ALAS-2020-1384: rubygem-rake (medium)
CVEs:CVE-2020-8130
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| rubygem-rake | affected | Amazon | rubygem-rake | — |
ALAS-2020-1385: rubygem24-rake (medium)
CVEs:CVE-2020-8130
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| rubygem24-rake | affected | Amazon | rubygem24-rake | — |
ALAS-2020-1379: bash (medium)
CVEs:CVE-2019-9924
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| bash | affected | Amazon | bash | — |
ALAS-2020-1383: lftp (medium)
CVEs:CVE-2018-10916
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lftp | affected | Amazon | lftp | — |
ALAS-2020-1372: python-twisted-web (important)
CVEs:CVE-2020-10108
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-twisted-web | affected | Amazon | python-twisted-web | — |
ALAS-2020-1388: texlive (medium)
CVEs:CVE-2018-17407
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| texlive | affected | Amazon | texlive | — |
ALAS-2020-1374: krb5 (medium)
CVEs:CVE-2018-20217
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| krb5 | affected | Amazon | krb5 | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.