ALAS-2022-1629
ALAS · AL1Low2022-08-23
ALAS-2022-1629: 389-ds-base (low)
CVEs:CVE-2021-4091
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
ALAS-2022-1629: 389-ds-base (low)
CVEs:CVE-2021-4091
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2022-1630: gnupg2 (medium)
CVEs:CVE-2022-34903
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| gnupg2 | affected | Amazon | gnupg2 | — |
ALAS-2022-1631: java-1.8.0-openjdk (important)
CVEs:CVE-2022-21248CVE-2022-21282CVE-2022-21283CVE-2022-21293CVE-2022-21294CVE-2022-21296CVE-2022-21299CVE-2022-21305CVE-2022-21340CVE-2022-21341CVE-2022-21349CVE-2022-21360CVE-2022-21365CVE-2022-21426CVE-2022-21434CVE-2022-21443CVE-2022-21476CVE-2022-21496CVE-2022-21540CVE-2022-21541CVE-2022-34169
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2022-1632: varnish (important)
CVEs:CVE-2022-23959
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| varnish | affected | Amazon | varnish | — |
ALAS-2022-1619: 389-admin (low)
CVEs:CVE-2021-3652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-admin | affected | Amazon | 389-admin | — |
ALAS-2022-1620: 389-ds-base (low)
CVEs:CVE-2021-3652
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| 389-ds-base | affected | Amazon | 389-ds-base | — |
ALAS-2022-1621: clamav (important)
CVEs:CVE-2022-20770CVE-2022-20771CVE-2022-20785CVE-2022-20796
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| clamav | affected | Amazon | clamav | — |
ALAS-2022-1622: exim (critical)
CVEs:CVE-2020-28007CVE-2020-28008CVE-2020-28009CVE-2020-28010CVE-2020-28011CVE-2020-28012CVE-2020-28013CVE-2020-28014CVE-2020-28019CVE-2020-28022CVE-2020-28023CVE-2020-28024CVE-2020-28025CVE-2020-28026CVE-2021-27216
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| exim | affected | Amazon | exim | — |
ALAS-2022-1623: git (medium)
CVEs:CVE-2022-29187
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| git | affected | Amazon | git | — |
ALAS-2022-1624: kernel (important)
CVEs:CVE-2022-2318CVE-2022-26365CVE-2022-33740CVE-2022-33741CVE-2022-33742CVE-2022-33744
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2022-1625: libtiff (medium)
CVEs:CVE-2016-9532CVE-2020-35521CVE-2020-35522CVE-2020-35523CVE-2020-35524CVE-2022-0561CVE-2022-0562CVE-2022-0865CVE-2022-0907CVE-2022-0908CVE-2022-0909CVE-2022-0924CVE-2022-22844
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| libtiff | affected | Amazon | libtiff | — |
ALAS-2022-1626: openssl (medium)
CVEs:CVE-2022-2068
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| openssl | affected | Amazon | openssl | — |
ALAS-2022-1627: tomcat8 (important)
CVEs:CVE-2022-25762CVE-2022-29885
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2022-1628: vim (medium)
CVEs:CVE-2022-1616CVE-2022-1619CVE-2022-1620CVE-2022-1621CVE-2022-1629CVE-2022-1674CVE-2022-1720CVE-2022-1725CVE-2022-1733CVE-2022-1735CVE-2022-1769CVE-2022-1771CVE-2022-1785CVE-2022-1796CVE-2022-1851CVE-2022-1886CVE-2022-1897CVE-2022-1898CVE-2022-1927CVE-2022-1942CVE-2022-1968CVE-2022-2000CVE-2022-2042CVE-2022-2124CVE-2022-2125CVE-2022-2126CVE-2022-2129CVE-2022-2175CVE-2022-2182CVE-2022-2183CVE-2022-2206CVE-2022-2207CVE-2022-2208CVE-2022-2210CVE-2022-2231
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| vim | affected | Amazon | vim | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.