AWS-2024-001
AWS BulletinExploitedCISA KEV listed2024-01-31
CVE-2024-21626 - Runc container issue
CVEs:CVE-2024-21626
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
CVE-2024-21626 - Runc container issue
CVEs:CVE-2024-21626
ALAS-2024-1905: perl-Spreadsheet-ParseExcel (important)
CVEs:CVE-2023-7101
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| perl-Spreadsheet-ParseExcel | affected | Amazon | perl-Spreadsheet-ParseExcel | — |
ALAS-2024-1901: squid (important)
CVEs:CVE-2023-49285
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| squid | affected | Amazon | squid | — |
ALAS-2024-1900: xorg-x11-server (important)
CVEs:CVE-2023-6377CVE-2023-6478
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| xorg-x11-server | affected | Amazon | xorg-x11-server | — |
ALAS-2024-1908: exim (important)
CVEs:CVE-2023-51766
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| exim | affected | Amazon | exim | — |
ALAS-2024-1903: golang (medium)
CVEs:CVE-2023-39326CVE-2023-45283CVE-2023-45284
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Amazon | golang | — |
ALAS-2024-1899: kernel (important)
CVEs:CVE-2023-0590CVE-2023-52340CVE-2023-52813CVE-2023-52881CVE-2023-6932
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
ALAS-2024-1907: nss-softokn (medium)
CVEs:CVE-2023-5388
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nss-softokn | affected | Amazon | nss-softokn | — |
ALAS-2024-1902: vim (low)
CVEs:CVE-2023-48231CVE-2023-48233CVE-2023-48234CVE-2023-48235CVE-2023-48236CVE-2023-48237
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| vim | affected | Amazon | vim | — |
ALAS-2024-1909: tomcat8 (medium)
CVEs:CVE-2023-46589
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tomcat8 | affected | Amazon | tomcat8 | — |
ALAS-2024-1910: apache-ivy (important)
CVEs:CVE-2022-37866
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| apache-ivy | affected | Amazon | apache-ivy | — |
ALAS-2024-1904: java-1.8.0-openjdk (medium)
CVEs:CVE-2023-22067CVE-2023-22081
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| java-1.8.0-openjdk | affected | Amazon | java-1.8.0-openjdk | — |
ALAS-2024-1906: kernel (important)
CVEs:CVE-2023-6606
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kernel | affected | Amazon | kernel | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.