AWS Security Advisories · July 2023 — AWS Security Advisories
14 advisories 16 CVEs

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2023-07. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2023-1785

ALAS · AL1Active exploitation (sightings)Low2023-07-19

ALAS-2023-1785: wireshark (low)

CVEs:CVE-2023-0667

Affected products

ProductStatusVendorPackageEcosystem
wireshark affected Amazon wireshark
Upstream advisory

ALAS-2023-1787

ALAS · AL1PoC exploitMedium2023-07-19

ALAS-2023-1787: python-imaging (medium)

CVEs:CVE-2016-9190

Affected products

ProductStatusVendorPackageEcosystem
python-imaging affected Amazon python-imaging
Upstream advisory

ALAS-2023-1788

ALAS · AL1Coalition ESS < 30%Medium2023-07-26

ALAS-2023-1788: libtiff (medium)

CVEs:CVE-2023-3576

Affected products

ProductStatusVendorPackageEcosystem
libtiff affected Amazon libtiff
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.