ALAS-2020-1397
ALAS · AL1Active exploitation (sightings)Medium2020-07-16
ALAS-2020-1397: php72, php73 (medium)
CVEs:CVE-2019-11048
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php72, php73 | affected | Amazon | php72, php73 | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2020-1397: php72, php73 (medium)
CVEs:CVE-2019-11048
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| php72, php73 | affected | Amazon | php72, php73 | — |
ALAS-2020-1408: qemu-kvm (important)
CVEs:CVE-2019-9824CVE-2020-7039CVE-2020-8608
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| qemu-kvm | affected | Amazon | qemu-kvm | — |
ALAS-2020-1400: qemu-kvm (important)
CVEs:CVE-2019-9824CVE-2020-7039CVE-2020-8608
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| qemu-kvm | affected | Amazon | qemu-kvm | — |
ALAS-2020-1412: doxygen (low)
CVEs:CVE-2016-10245
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| doxygen | affected | Amazon | doxygen | — |
ALAS-2020-1409: tomcat8 (important)
CVEs:CVE-2020-13934CVE-2020-13935
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2020-1413: git (important)
CVEs:CVE-2020-11008CVE-2020-5260
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| git | affected | Amazon | git | — |
ALAS-2020-1406: python26 (medium)
CVEs:CVE-2020-8492
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python26 | affected | Amazon | python26 | — |
ALAS-2020-1407: python27, python34, python35, python36 (medium)
CVEs:CVE-2019-18348CVE-2020-8492
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27, python34, python35, python36 | affected | Amazon | python27, python34, python35, python36 | — |
Container Networking Security Issue (CVE-2020-8558)
CVEs:CVE-2020-8558
ALAS-2020-1402: mysql56 (medium)
CVEs:CVE-2020-2763CVE-2020-2780CVE-2020-2804CVE-2020-2812CVE-2020-2814
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mysql56 | affected | Amazon | mysql56 | — |
ALAS-2020-1403: mysql57 (medium)
CVEs:CVE-2020-2760CVE-2020-2763CVE-2020-2765CVE-2020-2780CVE-2020-2804CVE-2020-2812CVE-2020-2814
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mysql57 | affected | Amazon | mysql57 | — |
ALAS-2020-1411: curl (medium)
CVEs:CVE-2020-8177
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| curl | affected | Amazon | curl | — |
ALAS-2020-1401: kernel (important)
CVEs:CVE-2018-20669CVE-2019-19462CVE-2020-0543CVE-2020-10732CVE-2020-10757CVE-2020-10766CVE-2020-10767CVE-2020-10768CVE-2020-12771
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2020-1396: microcode_ctl (medium)
CVEs:CVE-2020-0543CVE-2020-0548CVE-2020-0549
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| microcode_ctl | affected | Amazon | microcode_ctl | — |
ALAS-2020-1404: nghttp2 (important)
CVEs:CVE-2020-11080
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nghttp2 | affected | Amazon | nghttp2 | — |
ALAS-2020-1394: librabbitmq (medium)
CVEs:CVE-2019-18609
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| librabbitmq | affected | Amazon | librabbitmq | — |
ALAS-2020-1393: libexif (medium)
CVEs:CVE-2020-13112
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libexif | affected | Amazon | libexif | — |
ALAS-2020-1399: transmission (medium)
CVEs:CVE-2018-10756
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| transmission | affected | Amazon | transmission | — |
ALAS-2020-1395: mailman (medium)
CVEs:CVE-2018-0618CVE-2018-13796
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| mailman | affected | Amazon | mailman | — |
ALAS-2020-1398: poppler (medium)
CVEs:CVE-2018-21009CVE-2019-10871CVE-2019-11459CVE-2019-12293CVE-2019-9959
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| poppler | affected | Amazon | poppler | — |
ALAS-2020-1392: cairo (medium)
CVEs:CVE-2016-3190
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cairo | affected | Amazon | cairo | — |
ALAS-2020-1410: openvpn (medium)
CVEs:CVE-2020-11810
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openvpn | affected | Amazon | openvpn | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.