AWS Security Advisories · April 2024 — AWS Security Advisories
9 advisories 10 CVEs 1 EXPLOITED

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2024-04. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

ALAS-2024-1930

ALAS · AL1ExploitedVulnCheck KEV listedImportant2024-04-29

ALAS-2024-1930: glibc (important)

CVEs:CVE-2024-2961

Affected products

ProductStatusVendorPackageEcosystem
glibc affected Amazon glibc —
Upstream advisory

ALAS-2024-1927

ALAS · AL1Active exploitation (sightings)Important2024-04-16

ALAS-2024-1927: tigervnc (important)

CVEs:CVE-2024-31083

Affected products

ProductStatusVendorPackageEcosystem
tigervnc affected Amazon tigervnc —
Upstream advisory

ALAS-2024-1928

ALAS · AL1Active exploitation (sightings)Important2024-04-16

ALAS-2024-1928: xorg-x11-server (important)

CVEs:CVE-2024-31083

Affected products

ProductStatusVendorPackageEcosystem
xorg-x11-server affected Amazon xorg-x11-server —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.