Amd Epyc 7663 vulnerabilities, page 4

98 vulnerabilities

Known vulnerabilities in Amd Epyc 7663, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7HighCVE-2020-12951amd · athlon™ series +59 moreamd athlon™ seriesRace condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.EPSS0.22%7.8HighCVE-2020-12944amd · athlon™ series +58 moreamd athlon™ seriesInsufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.EPSS0.35%5.5MediumCVE-2020-12966amd · 1st/2nd/3rd gen amd epyc™ processors +107 moreamd 1st/2nd/3rd gen amd epyc™ processorsAMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.EPSS0.31%7.1HighCVE-2020-12946amd · athlon™ series +45 moreamd athlon™ seriesInsufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.EPSS0.22%5.5MediumCVE-2020-12954amd · 1st gen amd epyc™ +60 moreamd 1st gen amd epyc™A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.EPSS0.23%9CriticalCVE-2020-12967amd · epyc_7232p_firmware +65 moreAMD Secure Encrypted VirtualizationThe lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.EPSS1.68%7.8HighCVE-2020-12988amd · 1st/2nd/3rd gen amd epyc™ processors +61 moreamd 1st/2nd/3rd gen amd epyc™ processorsA potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.EPSS1.04%7.8HighCVE-2020-12961amd · 2nd gen amd epyc™ +46 moreamd 2nd gen amd epyc™A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.EPSS0.25%5.5MediumCVE-2022-23824amd · a10-9600p_firmware +205 moreamd a10-9600p_firmwareIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.EPSS0.60%7.5HighCVE-2022-23818amd · 3rd gen amd epyc™ +23 moreamd 3rd gen amd epyc™Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity.EPSS0.50%5.3MediumCVE-2022-23830amd · 3rd gen amd epyc™ processors +67 moreamd 3rd gen amd epyc™ processorsSMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.EPSS0.35%7.9HighCVE-2024-21978amd · 3rd gen amd epyc™ processors +89 moreamd 3rd gen amd epyc™ processorsImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.EPSS0.49%7.9HighCVE-2024-21980amd · 3rd gen amd epyc™ processors +89 moreamd 3rd gen amd epyc™ processorsImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.EPSS0.45%2.4LowCVE-2023-20528amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.EPSS0.25%5.7MediumCVE-2023-20523amd · 2nd gen epyc +51 moreamd 2nd gen epycTOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.EPSS0.18%7.5HighCVE-2023-20529amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.EPSS0.63%5.3MediumCVE-2023-20532amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.EPSS0.57%7.5HighCVE-2023-20530amd · 3rd gen epyc +24 moreamd 3rd gen epycInsufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service.EPSS0.63%6MediumCVE-2023-20584amd · epyc_7203_firmware +66 moreamd epyc_7203_firmwareIOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.EPSS0.19%7.5HighCVE-2023-20533amd · 2nd gen amd epyc™ processors +96 moreamd 2nd gen amd epyc™ processorsInsufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.EPSS0.50%