AWS Security Advisories · February 2021 — AWS Security Advisories
6 advisories 13 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2021-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2021-1481

ALAS · AL1ExploitedCISA KEV listedMedium2021-02-17

ALAS-2021-1481: php7-pear (medium)

CVEs:CVE-2020-36193

Affected products

ProductStatusVendorPackageEcosystem
php7-pear affected Amazon php7-pear —
Upstream advisory

ALAS-2021-1484

ALAS · AL1PoC exploitMedium2021-02-24

ALAS-2021-1484: python27, python36, python38 (medium)

CVEs:CVE-2021-3177

Affected products

ProductStatusVendorPackageEcosystem
python27, python36, python38 affected Amazon python27, python36, python38 —
Upstream advisory

ALAS-2021-1479

ALAS · AL1PoC exploitImportant2021-02-17

ALAS-2021-1479: ImageMagick (important)

CVEs:CVE-2020-29599

Affected products

ProductStatusVendorPackageEcosystem
ImageMagick affected Amazon ImageMagick —
Upstream advisory

ALAS-2021-1483

ALAS · AL1Coalition ESS < 30%Important2021-02-24

ALAS-2021-1483: subversion (important)

CVEs:CVE-2020-17525

Affected products

ProductStatusVendorPackageEcosystem
subversion affected Amazon subversion —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.