Amd Epyc 7713 vulnerabilities, page 5

98 vulnerabilities

Known vulnerabilities in Amd Epyc 7713, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2023-20566amd · 3rd gen amd epyc™ processors +68 moreamd 3rd gen amd epyc™ processorsImproper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.EPSS0.37%7.5HighCVE-2023-20524amd · 2nd gen amd epyc™ +49 moreamd 2nd gen amd epyc™An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity.EPSS0.49%6.5MediumCVE-2023-20592amd · 1st gen amd epyc™ processors +91 moreamd 1st gen amd epyc™ processorsImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.EPSS1.02%4.4MediumCVE-2023-20594amd · 3rd gen amd epyc™ processors +139 moreamd 3rd gen amd epyc™ processorsImproper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.EPSS0.19%6.5MediumCVE-2023-20527amd · 1st gen epyc +66 moreamd 1st gen epycImproper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.EPSS0.61%5.7MediumCVE-2023-20521amd · 1st gen amd epyc™ processors +106 moreamd 1st gen amd epyc™ processorsTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.EPSS0.26%9.8CriticalCVE-2023-20520amd · 1st gen amd epyc™ +65 moreamd 1st gen amd epyc™Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.EPSS0.79%7.5HighCVE-2023-20578amd · epyc_7001_firmware +104 moreamd epyc_7001_firmwareA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.EPSS0.12%10CriticalCVE-2023-20591amd · epyc_7203_firmware +64 moreamd epyc_7203_firmwareImproper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.EPSS0.30%4.7MediumCVE-2023-20569amd · 1st gen amd epyc™ processors +338 moreamd 1st gen amd epyc™ processorsA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.EPSS7.30%7.5HighCVE-2023-20531amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service.EPSS0.63%4.6MediumCVE-2023-20526amd · 1st gen amd epyc™ processors +79 moreamd 1st gen amd epyc™ processorsInsufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.EPSS0.31%3.2LowCVE-2023-20573amd · 3rd gen amd epyc™ processors +66 moreDebug Exception Delivery in Secure Nested PagingA privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.EPSS0.29%6.5MediumCVE-2023-20575amd · 1st gen amd epyc™ processors +91 moreamd 1st gen amd epyc™ processorsA potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.EPSS0.80%6.5MediumCVE-2023-20525amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.EPSS0.61%4.9MediumCVE-2023-31347amd · 3rd gen amd epyc™ processors +64 moreamd 3rd gen amd epyc™ processorsDue to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.EPSS0.46%6MediumCVE-2023-31346amd · 3rd gen amd epyc™ processors +87 moreamd 3rd gen amd epyc™ processorsFailure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.EPSS0.31%6MediumCVE-2023-31355amd · 3rd gen amd epyc™ processors +89 moreamd 3rd gen amd epyc™ processorsImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.EPSS0.44%