Aller au contenu

Vulnérabilités de AMD 2nd Gen AMD EPYC™

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-20520 Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a… 9.8 Critique 9 mai 2023
CVE-2023-20524 An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an… 7.5 Élevée 9 mai 2023
CVE-2021-46775 Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,… 6.8 Moyenne 9 mai 2023
CVE-2021-46769 Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA… 8.8 Élevée 9 mai 2023
CVE-2021-46764 Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the… 7.5 Élevée 9 mai 2023
CVE-2021-46763 Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a… 7.5 Élevée 9 mai 2023
CVE-2021-46762 Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of… 3.9 Faible 9 mai 2023
CVE-2021-26379 Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM,… 9.8 Critique 9 mai 2023
CVE-2021-26370 Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious… Non notée 10 mai 2022
CVE-2021-26408 Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration… Non notée 10 mai 2022
CVE-2021-26330 AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources Non notée 16 nov. 2021
CVE-2020-12961 A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any… Non notée 16 nov. 2021
CVE-2020-12954 A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,… Non notée 16 nov. 2021
CVE-2021-26331 AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox… Non notée 16 nov. 2021
CVE-2021-26321 Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of… Non notée 16 nov. 2021
CVE-2021-26320 Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local… Non notée 16 nov. 2021
CVE-2021-26322 Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack” Non notée 16 nov. 2021
CVE-2021-26329 AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may… Non notée 16 nov. 2021
CVE-2021-26338 Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control… Non notée 16 nov. 2021

Autres produits AMD