Amd Epyc 74F3 vulnerabilities, page 2
97 vulnerabilities
Known vulnerabilities in Amd Epyc 74F3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26337amdathlon™ series+113
EPSS score0.24%
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.CVE-2021-26388amdathlon™ series+108EPSS score0.22%
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.CVE-2021-26344amdamd athlon™ 3000 series desktop processors with radeon™ graphics+83EPSS score0.16%
An out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow an attacker with access the ability
to modify the BIOS image, and the ability to sign the resulting image, to
potentially modify the APCB block resulting in arbitrary code execution.CVE-2021-26345amd2nd gen amd epyc™ processors+94EPSS score0.43%
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.CVE-2021-26353amd3rd gen epyc+23EPSS score0.27%
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.CVE-2021-26378amdathlon™ series+85EPSS score0.22%
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.CVE-2021-26396amd3rd gen epyc+24EPSS score0.11%
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.CVE-2021-26328amd3rd gen epyc+24EPSS score0.18%
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.CVE-2021-26335amdathlon™ series+59EPSS score0.29%
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.CVE-2021-26350amdepyc_7232p_firmware+44EPSS score0.14%
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.CVE-2021-26321amd1st gen amd epyc™+59EPSS score0.25%
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.CVE-2021-26373amdathlon™ series+89EPSS score0.22%
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service.CVE-2021-26348amdepyc_72f3_firmware+23EPSS score0.22%
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.CVE-2021-26338amd2nd gen amd epyc™+45EPSS score0.93%
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.CVE-2021-26312amdathlon™ series+59EPSS score0.25%
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.CVE-2021-26330amd1st gen amd epyc™+60EPSS score0.22%
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.CVE-2021-26375amdathlon™ series+85EPSS score0.22%
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.CVE-2021-26325amd3rd gen amd epyc™+20EPSS score0.22%
Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service.CVE-2021-26322amd1st gen amd epyc™+59EPSS score1.05%
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.CVE-2021-26332amd3rd gen amd epyc™+23EPSS score0.23%
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.