Amd 3rd Gen Amd Epyc™
28 CVEs affecting Amd 3rd Gen Amd Epyc™. Latest disclosed: 2023-05-09. Critical: 2, High: 17.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20520 | Critical | 9.8 | 2023-05-09 | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading… |
CVE-2021-26379 | Critical | 9.8 | 2023-05-09 | Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity a… |
CVE-2021-46769 | High | 8.8 | 2023-05-09 | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution… |
CVE-2021-46771 | High | 7.8 | 2022-05-10 | Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user… |
CVE-2021-26324 | High | 7.8 | 2022-05-10 | A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. |
CVE-2021-26331 | High | 7.8 | 2021-11-16 | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code executio… |
CVE-2021-26323 | High | 7.8 | 2021-11-16 | Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. |
CVE-2021-26315 | High | 7.8 | 2021-11-16 | When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of th… |
CVE-2020-12961 | High | 7.8 | 2021-11-16 | A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management N… |
CVE-2021-26326 | High | 7.8 | 2021-11-16 | Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. |
CVE-2023-20524 | High | 7.5 | 2023-05-09 | An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to… |
CVE-2022-23818 | High | 7.5 | 2023-05-09 | Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity. … |
CVE-2021-46764 | High | 7.5 | 2023-05-09 | Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of… |
CVE-2021-46763 | High | 7.5 | 2023-05-09 | Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to… |
CVE-2021-26338 | High | 7.5 | 2021-11-16 | Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potent… |
CVE-2021-26322 | High | 7.5 | 2021-11-16 | Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. |
CVE-2021-26397 | High | 7.1 | 2023-05-09 | Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of… |
CVE-2021-26370 | High | 7.1 | 2022-05-10 | Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to o… |
CVE-2021-26332 | High | 7.1 | 2022-05-10 | Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability. |
CVE-2021-46775 | Medium | 6.8 | 2023-05-09 | Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrit… |