Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

CVE-2024-36350

AMD AMD EPYCâ„¢ 7003 Series Processors

MEDIUM 5.6

En bref

Source
NVD
EPSS
EPSS 0.49 % · centile 42 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
AMD
Statut NVD
Deferred

Description

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

Faiblesses (CWE)

  • CWE-1421 — Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NAMD
CVSS 3.1MEDIUM 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NNVD · psirt@amd.com (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
AMD · AMD EPYC™ 7003 Series Processorsunaffected MilanPI 1.0.0.G + OS Updates
AMD · AMD EPYC™ 9004 Series Processorsunaffected GenoaPI 1.0.0.E + OS Updates
AMD · AMD EPYC™ 8004 Series Processorsunaffected GenoaPI 1.0.0.E + OS Updates
AMD · AMD EPYC™ 9V64H Processorunaffected MI300PI 1.0.0.7 + OS Updates
AMD · AMD Ryzen™ 5000 Series Desktop Processorsunaffected ComboAM4v2PI 1.2.0.E + OS Updates
AMD · AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphicsunaffected ComboAM4v2PI 1.2.0.E + OS Updates
AMD · AMD Ryzen™ 7000 Series Desktop Processorsunaffected ComboAM5PI 1.2.0.3 + OS Updates ; unaffected ComboAM5PI 1.0.0.a+ OS Updates ; unaffected ComboAM5PI 1.1.0.3c+ OS Updates
AMD · AMD Ryzen™ 8000 Series Processor with Radeon™ Graphicsunaffected ComboAM5PI 1.2.0.3 + OS Updates ; unaffected ComboAM5PI 1.1.0.3c+ OS Updates
AMD · AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processorsunaffected StormPeakPI-SP6 1.1.0.0i + OS Updates ; unaffected StormPeakPI-SP6 1.0.0.1k + OS Updates
AMD · AMD Ryzen™ 6000 Series Processor with Radeon™ Graphicsunaffected RembrandtPI-FP7 1.0.0.Bb + OS Updates
AMD · AMD Ryzen™ 7035 Series Processor with Radeon™ Graphicsunaffected RembrandtPI-FP7 1.0.0.Bb + OS Updates
AMD · AMD Ryzen™ 7000 Series Processors with Radeon™ Graphicsunaffected CezannePI-FP6 1.0.1.1b + OS Updates
AMD · AMD Ryzen™ 7040 Series Processors with Radeon™ Graphicsunaffected PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
AMD · AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphicsunaffected PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
AMD · AMD Ryzen™ 7000 Series Mobile Processorsunaffected DragonRangeFL1 1.0.0.3g + OS Updates
AMD · AMD EPYC™ Embedded 7003 Series Processorsunaffected EmbMilanPI-SP3 1.0.0.A + OS updates
AMD · AMD EPYC™ Embedded 8004 Series Processorsunaffected EmbGenoaPI-SP5 1.0.0.9 + OS updates
AMD · AMD EPYC™ Embedded 9004 Series Processorsunaffected EmbGenoaPI-SP5 1.0.0.9 + OS updates
AMD · AMD Ryzen™ Embedded 5000 Series Processorsunaffected EmbAM4PI 1.0.0.7 + OS Update
AMD · AMD Ryzen™ Embedded 7000 Series Processorsunaffected EmbeddedAM5PI 1.0.0.3 + OS updates

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD