microcode_ctl vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the microcode_ctl package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H CVE-2024-23918	<2:2.1-47.44.amzn1
H Incorrect Default Permissions	<2:2.1-47.44.amzn1
H CVE-2024-24853	<2:2.1-47.44.amzn1
H Improper Finite State Machines (FSMs) in Hardware Logic	<2:2.1-47.44.amzn1
H Information Exposure	<2:2.1-47.44.amzn1
H CVE-2024-24980	<2:2.1-47.44.amzn1
H CVE-2023-49141	<2:2.1-47.43.amzn1
M Improper Cross-boundary Removal of Sensitive Data	<2:2.1-47.40.amzn1
H CVE-2022-38090	<2:2.1-47.41.amzn1
H CVE-2022-21216	<2:2.1-47.41.amzn1
H CVE-2023-23583	<2:2.1-47.42.amzn1
H Incorrect Default Permissions	<2:2.1-47.41.amzn1
M Incomplete Cleanup	<2:2.1-47.40.amzn1
M Improper Cross-boundary Removal of Sensitive Data	<2:2.1-47.40.amzn1
M Improper Resource Shutdown or Release	<2:2.1-47.39.amzn1
M Improper Resource Shutdown or Release	<2:2.1-47.39.amzn1
M Incomplete Cleanup	<2:2.1-47.39.amzn1
M Improper Check for Unusual or Exceptional Conditions	<2:2.1-47.36.amzn1
M CVE-2019-11135	<2:2.1-47.36.amzn1