CVE Daily – Amazon Linux https://cvedaily.com/pages/tags/amazon-linux.html CVE Daily – Amazon Linux en Wed, 03 Jun 2026 21:27:08 +0000 [Medium] CVE-2023-35812 – An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon L... https://nvd.nist.gov/vuln/detail/CVE-2023-35812 https://nvd.nist.gov/vuln/detail/CVE-2023-35812 Wed, 03 Apr 2024 17:15:47 +0000 Medium CVE-2023-35812

An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111 within these specific packages. The fix had only covered cases where an absolute path is passed to scp. When a relative path is used, there is no verification that the name of a file received by the client matches the file requested. Fixed packages are avail…

CVSS: 5.3 · CWE: CWE-22

View on NVD

]]> [Medium] CVE-2022-34266 – The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows atta... https://nvd.nist.gov/vuln/detail/CVE-2022-34266 https://nvd.nist.gov/vuln/detail/CVE-2022-34266 Tue, 19 Jul 2022 20:15:11 +0000 Medium CVE-2022-34266

The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset() function within TIFFFetchStripThing() in tif_dirread.c. This will cause TIFFFetchStripThing() to segfault after use…

CVSS: 5.5 · CWE: CWE-908

View on NVD

]]>