Amd Epyc 7742 vulnerabilities, page 3

75 vulnerabilities

Known vulnerabilities in Amd Epyc 7742, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2021-46763amd · 2nd gen amd epyc™ +49 moreamd 2nd gen amd epyc™Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to a loss of integrity.EPSS0.49%7.5HighCVE-2021-46774amd · 1st gen amd epyc™ processors +149 moreamd 1st gen amd epyc™ processorsInsufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.EPSS0.51%9.1CriticalCVE-2021-46762amd · 2nd gen amd epyc™ +51 moreamd 2nd gen amd epyc™Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.EPSS0.35%5.6MediumCVE-2021-46778amd · amd processors +179 moreamd amd processorsExecution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.EPSS0.23%8.8HighCVE-2021-46769amd · 2nd gen amd epyc™ +49 moreamd 2nd gen amd epyc™Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.EPSS0.78%7.5HighCVE-2021-46764amd · 2nd gen amd epyc™ +49 moreamd 2nd gen amd epyc™Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service.EPSS0.63%7HighCVE-2020-12951amd · athlon™ series +59 moreamd athlon™ seriesRace condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.EPSS0.22%7.8HighCVE-2020-12944amd · athlon™ series +58 moreamd athlon™ seriesInsufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.EPSS0.35%5.5MediumCVE-2020-12966amd · 1st/2nd/3rd gen amd epyc™ processors +107 moreamd 1st/2nd/3rd gen amd epyc™ processorsAMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.EPSS0.31%7.1HighCVE-2020-12946amd · athlon™ series +45 moreamd athlon™ seriesInsufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.EPSS0.22%5.5MediumCVE-2020-12954amd · 1st gen amd epyc™ +60 moreamd 1st gen amd epyc™A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.EPSS0.23%9CriticalCVE-2020-12967amd · epyc_7232p_firmware +65 moreAMD Secure Encrypted VirtualizationThe lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.EPSS1.68%7.8HighCVE-2020-12988amd · 1st/2nd/3rd gen amd epyc™ processors +61 moreamd 1st/2nd/3rd gen amd epyc™ processorsA potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.EPSS1.04%7.8HighCVE-2020-12961amd · 2nd gen amd epyc™ +46 moreamd 2nd gen amd epyc™A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.EPSS0.25%6.5MediumCVE-2022-29900amd · a10-9600p_firmware +214 moreamd a10-9600p_firmwareMis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.EPSS3.94%4.7MediumCVE-2022-27672amd · 1st gen amd epyc™ processors +274 moreamd 1st gen amd epyc™ processorsWhen SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.EPSS0.28%6.5MediumCVE-2022-23823amd · a10-9600p_firmware +142 moreamd a10-9600p_firmwareA potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.EPSS1.17%5.5MediumCVE-2022-23824amd · a10-9600p_firmware +205 moreamd a10-9600p_firmwareIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.EPSS0.60%6.5MediumCVE-2022-23825amd · a10-9600p_firmware +255 moreamd a10-9600p_firmwareAliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.EPSS0.78%2.4LowCVE-2023-20528amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.EPSS0.25%