AMD 3rd Gen AMD EPYC™
28 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20524 | various | An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, pot | HIGH 7.5 | 0.5 % | ||
| CVE-2023-20520 | various | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun | CRITICAL 9.8 | 0.8 % | ||
| CVE-2022-23818 | various | Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity. | HIGH 7.5 | 0.5 % | ||
| CVE-2021-46775 | various | Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to | MEDIUM 6.8 | 0.3 % | ||
| CVE-2021-46769 | various | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead | HIGH 8.8 | 0.8 % | ||
| CVE-2021-46764 | various | Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially result | HIGH 7.5 | 0.6 % | ||
| CVE-2021-46763 | various | Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer pote | HIGH 7.5 | 0.5 % | ||
| CVE-2021-46762 | various | Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of s | CRITICAL 9.1 | 0.3 % | ||
| CVE-2021-26397 | various | Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially res | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26379 | various | Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a | CRITICAL 9.8 | 0.7 % | ||
| CVE-2021-46771 | unspecified – < MilanPI-SP3_1.0.0.4 | Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26324 | unspecified – < MilanPI-SP3_1.0.0.4 | A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs. | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26332 | unspecified – < MilanPI-SP3_1.0.0.4 | Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability. | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26370 | unspecified – < MilanPI-SP3_1.0.0.4 | Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may all | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26325 | unspecified – < MilanPI-SP3_1.0.0.4 | Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26330 | unspecified – < MilanPI-SP3_1.0.0.4 | AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26327 | unspecified – < MilanPI-SP3_1.0.0.4 | Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26323 | unspecified – < MilanPI-SP3_1.0.0.4 | Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. | HIGH 7.8 | 0.2 % | ||
| CVE-2020-12961 | unspecified – < MilanPI-SP3_1.0.0.4 | A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the | HIGH 7.8 | 0.2 % | ||
| CVE-2021-26315 | unspecified – < MilanPI-SP3_1.0.0.4 | When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient | HIGH 7.8 | 0.2 % | ||
| CVE-2020-12954 | unspecified – < MilanPI-SP3_1.0.0.4 | A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26331 | unspecified – < MilanPI-SP3_1.0.0.4 | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbi | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26321 | unspecified – < MilanPI-SP3_1.0.0.4 | Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP. | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-26320 | unspecified – < MilanPI-SP3_1.0.0.4 | Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attac | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26322 | unspecified – < MilanPI-SP3_1.0.0.4 | Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. | HIGH 7.5 | 1.0 % | ||
| CVE-2021-26329 | unspecified – < MilanPI-SP3_1.0.0.4 | AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26338 | unspecified – < MilanPI-SP3_1.0.0.4 | Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM re | HIGH 7.5 | 0.9 % | ||
| CVE-2021-26326 | unspecified – < MilanPI-SP3_1.0.0.4 | Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. | HIGH 7.8 | 0.3 % |