Amd 3Rd Gen AMD Epyc™ Processors vulnerabilities
25 vulnerabilities
Known vulnerabilities in Amd 3Rd Gen AMD Epyc™ Processors, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26354amd2nd gen amd epyc™ processors+169
EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-26356amd1st gen amd epyc™ processors+105EPSS score0.40%
A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.CVE-2021-26345amd2nd gen amd epyc™ processors+94EPSS score0.43%
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.CVE-2021-26371amd1st gen amd epyc™ processors+140EPSS score0.19%
A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.CVE-2021-46756amd1st gen amd epyc™ processors+80EPSS score0.65%
Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.CVE-2021-46774amd1st gen amd epyc™ processors+149EPSS score0.51%
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.CVE-2022-23830amd3rd gen amd epyc™ processors+67EPSS score0.35%
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.CVE-2022-23820amd3rd gen amd epyc™ processors+123EPSS score0.70%
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.CVE-2022-23829amd1st gen amd epyc™ processors+23EPSS score0.20%
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.CVE-2024-21978amd3rd gen amd epyc™ processors+89EPSS score0.49%
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.CVE-2024-21980amd3rd gen amd epyc™ processors+89EPSS score0.45%
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.CVE-2023-20533amd2nd gen amd epyc™ processors+96EPSS score0.50%
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.CVE-2023-20566amd3rd gen amd epyc™ processors+68EPSS score0.37%
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.CVE-2023-20592amd1st gen amd epyc™ processors+91EPSS score1.02%
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.CVE-2023-20594amd3rd gen amd epyc™ processors+139EPSS score0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.CVE-2023-20521amd1st gen amd epyc™ processors+106EPSS score0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.CVE-2023-20519amd3rd gen amd epyc™ processors+3EPSS score0.20%
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.CVE-2023-20526amd1st gen amd epyc™ processors+79EPSS score0.31%
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.CVE-2023-20573amd3rd gen amd epyc™ processors+66EPSS score0.29%
A privileged attacker
can prevent delivery of debug exceptions to SEV-SNP guests potentially
resulting in guests not receiving expected debug information.CVE-2023-20575amd1st gen amd epyc™ processors+91EPSS score0.80%
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.