Amd Epyc 7H12 vulnerabilities
56 vulnerabilities
Known vulnerabilities in Amd Epyc 7H12, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26403amd1st gen epyc+42
EPSS score0.12%
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.CVE-2021-26370amd2nd gen amd epyc™+50EPSS score0.23%
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.CVE-2021-26379amd2nd gen amd epyc™+49EPSS score0.68%
Insufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially
leading to a loss of integrity and privilege escalation.CVE-2021-26406amd1st gen amd epyc™ processors+52EPSS score0.42%
Insufficient validation in parsing Owner's
Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization)
and SEV-ES user application can lead to a host crash potentially resulting in
denial of service.CVE-2021-26398amd1st gen epyc+66EPSS score0.21%
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.CVE-2021-26354amd2nd gen amd epyc™ processors+169EPSS score0.18%
Insufficient bounds checking in ASP may allow an
attacker to issue a system call from a compromised ABL which may cause
arbitrary memory values to be initialized to zero, potentially leading to a
loss of integrity.CVE-2021-26311amdepyc_7232p_firmware+65EPSS score1.68%
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.CVE-2021-26316amd1st gen epyc+152EPSS score0.26%
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.CVE-2021-26356amd1st gen amd epyc™ processors+105EPSS score0.40%
A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.CVE-2021-26344amdamd athlon™ 3000 series desktop processors with radeon™ graphics+83EPSS score0.16%
An out of bounds memory write when processing the AMD
PSP1 Configuration Block (APCB) could allow an attacker with access the ability
to modify the BIOS image, and the ability to sign the resulting image, to
potentially modify the APCB block resulting in arbitrary code execution.CVE-2021-26345amd2nd gen amd epyc™ processors+94EPSS score0.43%
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.CVE-2021-26321amd1st gen amd epyc™+59EPSS score0.25%
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.CVE-2021-26338amd2nd gen amd epyc™+45EPSS score0.93%
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.CVE-2021-26312amdathlon™ series+59EPSS score0.25%
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.CVE-2021-26341amda10-9600p_firmware+125EPSS score0.32%
Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.CVE-2021-26322amd1st gen amd epyc™+59EPSS score1.05%
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.CVE-2021-26371amd1st gen amd epyc™ processors+140EPSS score0.19%
A compromised or malicious ABL or UApp could
send a SHA256 system call to the bootloader, which may result in exposure of
ASP memory to userspace, potentially leading to information disclosure.CVE-2021-26401amda10-9600p_firmware+216EPSS score0.29%
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.CVE-2021-26340amdamd epyc™+105EPSS score0.25%
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM).CVE-2021-26320amd1st gen amd epyc™+59EPSS score0.19%
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP