AWS Security Advisories · February 2024 — AWS Security Advisories
12 advisories 20 CVEs 2 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2024-02. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2024-1919

ALAS · AL1ExploitedCISA KEV listedImportant2024-02-19

ALAS-2024-1919: kernel (important)

CVEs:CVE-2024-1086

Affected products

ProductStatusVendorPackageEcosystem
kernel affected Amazon kernel —
Upstream advisory

ALAS-2024-1911

ALAS · AL1ExploitedCISA KEV listedImportant2024-02-01

ALAS-2024-1911: runc (important)

CVEs:CVE-2024-21626

Affected products

ProductStatusVendorPackageEcosystem
runc affected Amazon runc —
Upstream advisory

ALAS-2024-1915

ALAS · AL1Active exploitation (sightings)Important2024-02-05

ALAS-2024-1915: cacti (important)

CVEs:CVE-2023-51448

Affected products

ProductStatusVendorPackageEcosystem
cacti affected Amazon cacti —
Upstream advisory

ALAS-2024-1916

ALAS · AL1Active exploitation (sightings)Important2024-02-05

ALAS-2024-1916: squid (important)

CVEs:CVE-2023-50269

Affected products

ProductStatusVendorPackageEcosystem
squid affected Amazon squid —
Upstream advisory

ALAS-2024-1913

ALAS · AL1PoC exploitImportant2024-02-05

ALAS-2024-1913: libtiff (important)

CVEs:CVE-2023-6277

Affected products

ProductStatusVendorPackageEcosystem
libtiff affected Amazon libtiff —
Upstream advisory

ALAS-2024-1917

ALAS · AL1All remainingLow2024-02-05

ALAS-2024-1917: sudo (low)

Affected products

ProductStatusVendorPackageEcosystem
sudo affected Amazon sudo —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.