ALAS-2021-1555
ALAS · AL1Medium2022-01-20
ALAS-2021-1555: containerd (medium)
CVEs:CVE-2020-15157
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| containerd | affected | Amazon | containerd | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
ALAS-2021-1555: containerd (medium)
CVEs:CVE-2020-15157
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| containerd | affected | Amazon | containerd | — |
ALAS-2021-1556: runc (important)
CVEs:CVE-2019-16884CVE-2019-19921
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| runc | affected | Amazon | runc | — |
ALAS-2022-1557: vim (medium)
CVEs:CVE-2020-20703CVE-2021-3903CVE-2021-3927CVE-2021-3928CVE-2021-3968CVE-2021-3973CVE-2021-3974CVE-2021-3984CVE-2021-4019CVE-2021-4069CVE-2021-4136CVE-2021-4166CVE-2021-4173CVE-2021-4187CVE-2021-4192CVE-2021-4193
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| vim | affected | Amazon | vim | — |
ALAS-2022-1558: busybox (medium)
CVEs:CVE-2021-42376CVE-2021-42378CVE-2021-42379CVE-2021-42384CVE-2021-42385CVE-2021-42386
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| busybox | affected | Amazon | busybox | — |
ALAS-2022-1559: cyrus-imapd (important)
CVEs:CVE-2021-33582
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| cyrus-imapd | affected | Amazon | cyrus-imapd | — |
ALAS-2022-1560: httpd24 (important)
CVEs:CVE-2021-44224CVE-2021-44790
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| httpd24 | affected | Amazon | httpd24 | — |
ALAS-2022-1561: java-1.8.0-openjdk (important)
CVEs:CVE-2021-35550CVE-2021-35556CVE-2021-35559CVE-2021-35561CVE-2021-35564CVE-2021-35565CVE-2021-35567CVE-2021-35578CVE-2021-35586CVE-2021-35588CVE-2021-35603
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2022-1562: log4j (important)
CVEs:CVE-2017-5645CVE-2019-17571CVE-2021-4104
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| log4j | affected | Amazon | log4j | — |
Reported AWS Glue Issue
Reported AWS CloudFormation Issue
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.