Amd 1st Gen Amd Epyc™
9 CVEs affecting Amd 1st Gen Amd Epyc™. Latest disclosed: 2023-05-09. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20520 | Critical | 9.8 | 2023-05-09 | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading… |
CVE-2021-26331 | High | 7.8 | 2021-11-16 | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code executio… |
CVE-2021-26322 | High | 7.5 | 2021-11-16 | Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. |
CVE-2021-26408 | High | 7.1 | 2022-05-10 | Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's inte… |
CVE-2021-26330 | Medium | 5.5 | 2021-11-16 | AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. |
CVE-2021-26321 | Medium | 5.5 | 2021-11-16 | Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP. |
CVE-2021-26320 | Medium | 5.5 | 2021-11-16 | Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a de… |
CVE-2020-12954 | Medium | 5.5 | 2021-11-16 | A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification. |
CVE-2021-26329 | Medium | 5.5 | 2021-11-16 | AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources. |