6.5
Medium
CVE-2023-20527 Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds,…
Description
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1st Gen EPYC | Versions not published | |
| 2nd Gen EPYC | Versions not published | |
| 3rd Gen EPYC | Versions not published |
Other CVEs of 1st Gen EPYC
The 5 CVEs of 1st Gen EPYC →
CVE-2021-46779
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an…
7.1
High
CVE-2021-26403
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in…
6.5
Medium
CVE-2021-26398
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an…
7.8
High
CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper…
7.8
High