ecs-service-connect-agent vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the ecs-service-connect-agent package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M CVE-2024-45810	<0:v1.29.9.0-1.amzn2023
M Out-of-bounds Read	<0:v1.29.9.0-1.amzn2023
M Improper Encoding or Escaping of Output	<0:v1.29.9.0-1.amzn2023
M Authorization Bypass Through User-Controlled Key	<0:v1.29.9.0-1.amzn2023
M NULL Pointer Dereference	<0:v1.29.9.0-1.amzn2023
H CVE-2024-38525	<0:v1.29.6.0-1.amzn2023
H CVE-2024-30255	<0:v1.29.5.0-1.amzn2023
H Resource Exhaustion	<0:v1.29.5.0-1.amzn2023
H Resource Exhaustion	<0:v1.29.5.0-1.amzn2023
H Resource Exhaustion	<0:v1.29.5.0-1.amzn2023
H Resource Exhaustion	<0:v1.29.5.0-1.amzn2023
H Incorrect Check of Function Return Value	<0:v1.29.5.0-1.amzn2023
H Resource Exhaustion	<0:v1.29.5.0-1.amzn2023
H Resource Exhaustion	<0:v1.29.5.0-1.amzn2023
H HTTP Request Smuggling	<0:v1.29.5.0-1.amzn2023
H NULL Pointer Dereference	<0:v1.27.3.0-1.amzn2023
H Inefficient CPU Computation	<0:v1.27.3.0-1.amzn2023
H Use After Free	<0:v1.27.3.0-1.amzn2023
H Improper Input Validation	<0:v1.27.3.0-1.amzn2023
H Uncaught Exception	<0:v1.27.3.0-1.amzn2023
H Resource Exhaustion	<0:v1.27.2.0-1.amzn2023
H Arbitrary Code Injection	<0:v1.27.2.0-1.amzn2023
H External Control of File Name or Path	<0:v1.27.2.0-1.amzn2023
H HTTP Request Smuggling	<0:v1.27.0.0-1.amzn2023
H Use After Free	<0:v1.27.0.0-1.amzn2023
H Use After Free	<0:v1.27.0.0-1.amzn2023
H Use of Insufficiently Random Values	<0:v1.27.0.0-1.amzn2023
H Use of Insufficiently Random Values	<0:v1.27.0.0-1.amzn2023
H Improper Encoding or Escaping of Output	<0:v1.27.0.0-1.amzn2023
H Resource Exhaustion	<0:v1.27.0.0-1.amzn2023
H Out-of-bounds Write	<0:v1.27.0.0-1.amzn2023
H Reliance on Undefined	<0:v1.27.0.0-1.amzn2023
H Improper Encoding or Escaping of Output	<0:v1.26.4.0-1.amzn2023
H HTTP Request Smuggling	<0:v1.26.4.0-1.amzn2023
H Use After Free	<0:v1.26.4.0-1.amzn2023
H Resource Exhaustion	<0:v1.26.4.0-1.amzn2023
H Use After Free	<0:v1.26.4.0-1.amzn2023
H CVE-2023-27488	<0:v1.25.4.0-1.amzn2023
H Improper Input Validation	<0:v1.25.4.0-1.amzn2023
H CVE-2023-27496	<0:v1.25.4.0-1.amzn2023
H HTTP Request Smuggling	<0:v1.25.4.0-1.amzn2023
H Improper Input Validation	<0:v1.25.4.0-1.amzn2023
H Resource Exhaustion	<0:v1.25.4.0-1.amzn2023

Vulnerability

Vulnerable Version

CVE-2024-45810

<0:v1.29.9.0-1.amzn2023

Out-of-bounds Read

<0:v1.29.9.0-1.amzn2023

Improper Encoding or Escaping of Output

<0:v1.29.9.0-1.amzn2023

Authorization Bypass Through User-Controlled Key

<0:v1.29.9.0-1.amzn2023

NULL Pointer Dereference

<0:v1.29.9.0-1.amzn2023