9.8
Critique
CVE-2023-20520 Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
Description
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 1st Gen AMD EPYC™ | Versions non publiées | |
| 2nd Gen AMD EPYC™ | Versions non publiées | |
| 3rd Gen AMD EPYC™ | Versions non publiées |
Autres CVE de 1st Gen AMD EPYC™
Les 9 CVE de 1st Gen AMD EPYC™ →
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration…
Non notée
CVE-2021-26330
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources
Non notée
CVE-2020-12954
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,…
Non notée
CVE-2021-26331
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox…
Non notée