amazon-cloudwatch-agent vulnerabilities (SUSE)

6 vulnerabilities.

• amazon-cloudwatch-agent SUSE gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers CVE-2026-84445 Fix available 8.7 HighSeptember 4, 2026
• amazon-cloudwatch-agent SUSE gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation CVE-2026-84304 Fix available 8.7 HighSeptember 1, 2026
• amazon-cloudwatch-agent SUSE gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion CVE-2026-84303 Fix available 6.3 MediumSeptember 1, 2026
• amazon-cloudwatch-agent SUSE grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X... CVE-2026-37236 Fix available 9.8 CriticalAugust 28, 2026
• amazon-cloudwatch-agent SUSE Integer Overflow or Wraparound and Out-of-bounds Write in compress CVE-2026-63209 Fix available 7.5 HighJuly 27, 2026
• amazon-cloudwatch-agent SUSE OpenTelemetry-Go's baggage parsing no longer caps raw header length CVE-2026-41178 Fix available 5.3 MediumMay 28, 2026