Amd 2Nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax” vulnerabilities
3 vulnerabilities
Known vulnerabilities in Amd 2Nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26406amd1st gen amd epyc™ processors+52
EPSS score0.42%
Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.CVE-2021-26354amd2nd gen amd epyc™ processors+169EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-46756amd1st gen amd epyc™ processors+80EPSS score0.65%
Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.