Known vulnerabilities in AMD 2nd Gen EPYC
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-20532 | Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in… | 5.3 Medium | Jan 10, 2023 |
| CVE-2023-20531 | Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid… | 7.5 High | Jan 10, 2023 |
| CVE-2023-20529 | Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value… | 7.5 High | Jan 10, 2023 |
| CVE-2023-20528 | Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C… | 2.4 Low | Jan 10, 2023 |
| CVE-2023-20527 | Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds,… | 6.5 Medium | Jan 10, 2023 |
| CVE-2023-20525 | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the… | 6.5 Medium | Jan 10, 2023 |
| CVE-2023-20523 | TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of… | 5.7 Medium | Jan 10, 2023 |
| CVE-2023-20522 | Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of… | 7.5 High | Jan 10, 2023 |
| CVE-2022-23813 | The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of… | 5.3 Medium | Jan 10, 2023 |
| CVE-2021-46779 | Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an… | 7.1 High | Jan 10, 2023 |
| CVE-2021-46768 | Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-46767 | Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory… | 6.1 Medium | Jan 10, 2023 |
| CVE-2021-26407 | A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting… | 5.5 Medium | Jan 10, 2023 |
| CVE-2021-26403 | Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in… | 6.5 Medium | Jan 10, 2023 |
Other AMD products
Ryzen 5000 Series 4
4th Gen AMD EPYC™ Processors 3
μProf 3
Ryzen™ 2000 Series 2
Ryzen™ 3000 Series 2
Ryzen™ 4000 Series 2
1st Gen AMD EPYC™ Processors 1
3rd Gen AMD EPYC™ Processors 1
Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards 1
Radeon™ RX 5000 Series Graphics Cards 1
Radeon™ RX 5000/6000/7000 Series Graphics Cards 1
Ryzen 2000 Series 1