CVE-2021-46774

AMD Ryzen™ 3000 series Desktop Processors “Matisse"

MEDIUM 6.7

En bref

Source: NVD
EPSS: EPSS 0.51 % · centile 43 (2026-10-29)
État: PUBLISHED
Publiée: 2023-11-14 18:52 UTC
Mise à jour: 2024-10-11 18:07 UTC
Attribuée par: AMD
Statut NVD: Modified

Description

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

Références

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	MEDIUM 6.7	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L	AMD
CVSS 3.1	MEDIUM 6.7	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L	NVD · psirt@amd.com (Secondary)
CVSS 3.1	HIGH 7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2021-33430
GCVE · GCVE-0-2021-46774

Avis du CERT-FR

CERTFR-2024-AVI-0578 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2023-AVI-1009 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:* < naplespi_1.0.0.k
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* < romepi_1.0.0.g
+97 autres

Produits affectés

Produit	Versions
AMD · Ryzen™ 3000 series Desktop Processors “Matisse"	affected various
AMD · AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”	affected various
AMD · AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT	affected various
AMD · AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3	affected various
AMD · AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS	affected various
AMD · 1st Gen AMD EPYC™ Processors	affected various
AMD · 2nd Gen AMD EPYC™ Processors	affected various
AMD · 3rd Gen AMD EPYC™ Processors	affected various
AMD · 4th Gen AMD EPYC™ Processors	affected various
AMD · AMD EPYC™ Embedded 3000	affected various
AMD · AMD EPYC™ Embedded 7002	affected various
AMD · AMD EPYC™ Embedded 7003	affected various
AMD · AMD Ryzen™ Embedded 5000	affected various
AMD · AMD EPYC™ Embedded 7002	affected various
AMD · AMD EPYC™ Embedded 3000	affected various
AMD · AMD EPYC™ Embedded 7003	affected various

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD