Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
ALAS-2022-1597: vim (important)
CVEs:CVE-2022-0261CVE-2022-0318CVE-2022-0359CVE-2022-0361CVE-2022-0392CVE-2022-0413CVE-2022-0572CVE-2022-0943CVE-2022-1154CVE-2022-1160CVE-2022-1381CVE-2022-1420
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| vim | affected | Amazon | vim | — |
ALAS-2022-1593: python27 (medium)
CVEs:CVE-2020-27619CVE-2021-23336CVE-2021-3733CVE-2021-3737CVE-2021-4189CVE-2022-0391
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python27 | affected | Amazon | python27 | — |
ALAS-2022-1594: rsyslog (important)
CVEs:CVE-2014-3634CVE-2022-24903
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| rsyslog | affected | Amazon | rsyslog | — |
ALAS-2022-1590: gzip (important)
CVEs:CVE-2022-1271
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gzip | affected | Amazon | gzip | — |
ALAS-2022-1598: xz (important)
CVEs:CVE-2022-1271
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xz | affected | Amazon | xz | — |
ALAS-2022-1588: expat (medium)
CVEs:CVE-2021-45960
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| expat | affected | Amazon | expat | — |
ALAS-2022-1595: rubygem-nokogiri, rubygem18-nokogiri (important)
CVEs:CVE-2022-24836
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| rubygem-nokogiri, rubygem18-nokogiri | affected | Amazon | rubygem-nokogiri, rubygem18-nokogiri | — |
ALAS-2022-1591: kernel (important)
CVEs:CVE-2022-0854CVE-2022-1011CVE-2022-1353CVE-2022-1516CVE-2022-1729CVE-2022-2639CVE-2022-28389CVE-2022-28390CVE-2022-29581CVE-2022-2977CVE-2022-30594CVE-2022-41858CVE-2022-49058CVE-2022-49085CVE-2022-49114CVE-2022-49287CVE-2023-1637CVE-2023-4387CVE-2023-4459
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2022-1600: containerd (medium)
CVEs:CVE-2022-31030
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| containerd | affected | Amazon | containerd | — |
ALAS-2022-1601: log4j-cve-2021-44228-hotpatch (important)
CVEs:CVE-2022-33915
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| log4j-cve-2021-44228-hotpatch | affected | Amazon | log4j-cve-2021-44228-hotpatch | — |
ALAS-2022-1592: python-twisted-conch (important)
CVEs:CVE-2022-21716
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| python-twisted-conch | affected | Amazon | python-twisted-conch | — |
ALAS-2022-1589: git (medium)
CVEs:CVE-2022-24765
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| git | affected | Amazon | git | — |
ALAS-2022-1587: aide (important)
CVEs:CVE-2021-45417
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aide | affected | Amazon | aide | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.