AMD 2nd Gen AMD EPYC™ Processors

CVE-2021-26345

LOW 1.9

En bref

Source: NVD
EPSS: EPSS 0.43 % · centile 38 (2026-10-29)
État: PUBLISHED
Publiée: 2023-11-14 18:53 UTC
Mise à jour: 2024-08-03 20:26 UTC
Attribuée par: AMD
Statut NVD: Modified

Rechercher sur…

Description

Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.

Faiblesses (CWE)

CWE-125 — Lecture hors limites

Références

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	LOW 1.9	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L	AMD
CVSS 3.1	LOW 1.9	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L	NVD · psirt@amd.com (Secondary)
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2021-13151
GCVE · GCVE-0-2021-26345

Avis du CERT-FR

CERTFR-2024-AVI-0578 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2023-AVI-1009 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.f
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.a
+50 autres

Produits affectés

Produit	Versions
AMD · 2nd Gen AMD EPYC™ Processors	affected various
AMD · 3rd Gen AMD EPYC™ Processors	affected various
AMD · 4th Gen AMD EPYC™ Processors	affected various
AMD · AMD EPYC™ Embedded 7002	affected various
AMD · AMD EPYC™ Embedded 7003	affected various
AMD · AMD EPYC™ Embedded 7002	affected various
AMD · AMD EPYC™ Embedded 7003	affected various

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟢 AMD 2nd Gen AMD EPYC™ Processors