Amd Epyc 7543 vulnerabilities, page 2
90 vulnerabilities
Known vulnerabilities in Amd Epyc 7543, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26345amd2nd gen amd epyc™ processors+94
EPSS score0.43%
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.CVE-2021-26353amd3rd gen epyc+23EPSS score0.27%
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.CVE-2021-26396amd3rd gen epyc+24EPSS score0.11%
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.CVE-2021-26328amd3rd gen epyc+24EPSS score0.18%
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.CVE-2021-26335amdathlon™ series+59EPSS score0.29%
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.CVE-2021-26321amd1st gen amd epyc™+59EPSS score0.25%
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.CVE-2021-26348amdepyc_72f3_firmware+23EPSS score0.22%
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.CVE-2021-26338amd2nd gen amd epyc™+45EPSS score0.93%
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.CVE-2021-26312amdathlon™ series+59EPSS score0.25%
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.CVE-2021-26330amd1st gen amd epyc™+60EPSS score0.22%
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.CVE-2021-26325amd3rd gen amd epyc™+20EPSS score0.22%
Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service.CVE-2021-26322amd1st gen amd epyc™+59EPSS score1.05%
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.CVE-2021-26332amd3rd gen amd epyc™+23EPSS score0.23%
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.CVE-2021-26371amd1st gen amd epyc™ processors+140EPSS score0.19%
A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.CVE-2021-26340amdamd epyc™+105EPSS score0.25%
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM).CVE-2021-26320amd1st gen amd epyc™+59EPSS score0.19%
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSPCVE-2021-26323amd3rd gen amd epyc™+20EPSS score0.25%
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.CVE-2021-26347amdepyc_7002_firmware+49EPSS score0.20%
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.CVE-2021-26404amd3rd gen epyc+23EPSS score0.18%
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.CVE-2021-26355amd3rd gen epyc+24EPSS score0.17%
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service.