Vulnérabilités connues pour 3rd Gen AMD EPYC™
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2023-20520 | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a… | 9.8 Critique | 9 mai 2023 |
| CVE-2023-20524 | An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an… | 7.5 Élevée | 9 mai 2023 |
| CVE-2022-23818 | Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP… | 7.5 Élevée | 9 mai 2023 |
| CVE-2021-46775 | Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,… | 6.8 Moyenne | 9 mai 2023 |
| CVE-2021-46769 | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA… | 8.8 Élevée | 9 mai 2023 |
| CVE-2021-46764 | Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the… | 7.5 Élevée | 9 mai 2023 |
| CVE-2021-46763 | Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a… | 7.5 Élevée | 9 mai 2023 |
| CVE-2021-46762 | Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of… | 3.9 Faible | 9 mai 2023 |
| CVE-2021-26397 | Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory… | 7.1 Élevée | 9 mai 2023 |
| CVE-2021-26379 | Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM,… | 9.8 Critique | 9 mai 2023 |
| CVE-2021-46771 | Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to… | Non notée | 10 mai 2022 |
| CVE-2021-26324 | A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs | Non notée | 10 mai 2022 |
| CVE-2021-26332 | Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or… | Non notée | 10 mai 2022 |
| CVE-2021-26370 | Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious… | Non notée | 10 mai 2022 |
| CVE-2021-26325 | Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial… | Non notée | 16 nov. 2021 |
| CVE-2021-26330 | AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources | Non notée | 16 nov. 2021 |
| CVE-2021-26327 | Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality | Non notée | 16 nov. 2021 |
| CVE-2021-26323 | Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity | Non notée | 16 nov. 2021 |
| CVE-2020-12961 | A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any… | Non notée | 16 nov. 2021 |
| CVE-2021-26315 | When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,… | Non notée | 16 nov. 2021 |
| CVE-2020-12954 | A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,… | Non notée | 16 nov. 2021 |
| CVE-2021-26331 | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox… | Non notée | 16 nov. 2021 |
| CVE-2021-26321 | Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of… | Non notée | 16 nov. 2021 |
| CVE-2021-26320 | Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local… | Non notée | 16 nov. 2021 |
| CVE-2021-26322 | Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack” | Non notée | 16 nov. 2021 |
Autres produits AMD
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Ryzen™ 7000 Series Desktop Processors 51
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 37
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 33