Aller au contenu

Vulnérabilités connues pour AMD 2nd Gen EPYC

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-20532 Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in… 5.3 Moyenne 10 janv. 2023
CVE-2023-20531 Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid… 7.5 Élevée 10 janv. 2023
CVE-2023-20529 Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value… 7.5 Élevée 10 janv. 2023
CVE-2023-20528 Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C… 2.4 Faible 10 janv. 2023
CVE-2023-20527 Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds,… 6.5 Moyenne 10 janv. 2023
CVE-2023-20525 Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the… 6.5 Moyenne 10 janv. 2023
CVE-2023-20523 TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of… 5.7 Moyenne 10 janv. 2023
CVE-2023-20522 Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of… 7.5 Élevée 10 janv. 2023
CVE-2022-23813 The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of… 5.3 Moyenne 10 janv. 2023
CVE-2021-46779 Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an… 7.1 Élevée 10 janv. 2023
CVE-2021-46768 Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP… 5.5 Moyenne 10 janv. 2023
CVE-2021-46767 Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory… 6.1 Moyenne 10 janv. 2023
CVE-2021-26407 A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting… 5.5 Moyenne 10 janv. 2023
CVE-2021-26403 Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in… 6.5 Moyenne 10 janv. 2023

Autres produits AMD