AWS Security Advisories — March 2024 — AWS Security Advisories

AWS Security Advisories · March 2024 — AWS Security Advisories

5 advisories 80 CVEs

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2024-03. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Back to archive Open Console

Advisories

AWS-2024-002

AWS Bulletin2024-03-29

CVE-2024-3094

CVEs:CVE-2024-3094

Upstream advisory

ALAS-2024-1926

ALAS · AL1Important2024-03-19

ALAS-2024-1926: ImageMagick (important)

CVEs:CVE-2016-5841 CVE-2017-1000476 CVE-2017-11166 CVE-2017-12805 CVE-2017-12806 CVE-2017-13139 CVE-2017-18251 CVE-2017-18252 CVE-2017-18254 CVE-2017-18271 CVE-2017-18273 CVE-2018-10177 CVE-2018-10804 CVE-2018-10805 CVE-2018-11656 CVE-2018-12599 CVE-2018-12600 CVE-2018-13153 CVE-2018-14434 CVE-2018-14435 CVE-2018-14436 CVE-2018-14437 CVE-2018-15607 CVE-2018-16328 CVE-2018-16749 CVE-2018-16750 CVE-2018-18544 CVE-2018-20467 CVE-2018-8804 CVE-2018-9133 CVE-2019-10131 CVE-2019-10650 CVE-2019-11470 CVE-2019-11472 CVE-2019-11597 CVE-2019-11598 CVE-2019-12974 CVE-2019-12975 CVE-2019-12976 CVE-2019-12978 CVE-2019-12979 CVE-2019-13133 CVE-2019-13134 CVE-2019-13135 CVE-2019-13295 CVE-2019-13297 CVE-2019-13300 CVE-2019-13301 CVE-2019-13304 CVE-2019-13305 CVE-2019-13306 CVE-2019-13307 CVE-2019-13309 CVE-2019-13310 CVE-2019-13311 CVE-2019-13454 CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 CVE-2019-17540 CVE-2019-17541 CVE-2019-19948 CVE-2019-19949 CVE-2019-7175 CVE-2019-7397 CVE-2019-7398 CVE-2019-9956

Affected products

Product	Status	Vendor	Package	Ecosystem
ImageMagick	affected	Amazon	ImageMagick	—

Upstream advisory

ALAS-2024-1923

ALAS · AL1Important2024-03-04

ALAS-2024-1923: kernel (important)

CVEs:CVE-2023-6270 CVE-2024-23849

Affected products

Product	Status	Vendor	Package	Ecosystem
kernel	affected	Amazon	kernel	—

Upstream advisory

ALAS-2024-1924

ALAS · AL1Important2024-03-04

ALAS-2024-1924: less (important)

CVEs:CVE-2022-48624

Affected products

Product	Status	Vendor	Package	Ecosystem
less	affected	Amazon	less	—

Upstream advisory

ALAS-2024-1925

ALAS · AL1Important2024-03-04

ALAS-2024-1925: cpio (important)

CVEs:CVE-2015-1197

Affected products

Product	Status	Vendor	Package	Ecosystem
cpio	affected	Amazon	cpio	—

Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.

All months Open Console