Upgrade Amazon-Linux:2 edk2-ovmf to version 0:20190308stable-1.amzn2.0.1 or higher. This issue was patched in ALAS2-2019-1273 .

compat-glibc vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the compat-glibc package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Incorrect Calculation of Buffer Size	*
M Memory Leak	*
M Use After Free	*
M Use After Free	*
M Improper Input Validation	*
M Improper Input Validation	*
M Off-by-one Error	*
M Heap-based Buffer Overflow	*
M Numeric Errors	*
M Out-of-Bounds	*
M Integer Overflow or Wraparound	*
M Out-of-Bounds	*
M Integer Overflow or Wraparound	*
M Improper Input Validation	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Integer Overflow or Wraparound	*
M Resource Exhaustion	*
M Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	*
L Resource Exhaustion	*
M Integer Overflow or Wraparound	*
L Allocation of Resources Without Limits or Throttling	*
L Use After Free	*
L Stack-based Buffer Overflow	*
M Stack-based Buffer Overflow	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*