CVE-2021-26347

Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 11 May 2022, 16:22
Last modified:03 Aug 2024, 20:26

Vulnerability Summary

Overall Risk (default)
low
19/100
CVSS Score
4.7 MEDIUM
v3.1 (nvd)
EPSS Score
0.05% LOW
0% probability -0.10%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

11 May 2022, 16:22
Published
Vulnerability first disclosed
03 Aug 2024, 20:26
Last Modified
Vulnerability information updated

Description

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 4.7AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.05%• Percentile: 15%

Techniques & Countermeasures

  • CWE-1284•Improper Validation of Specified Quantity in Input

    The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Affected Systems

  • amd•epyc_7002_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7232p_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7252_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7262_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7272_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7282_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_72f3_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7302_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7302p_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7313_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7313p_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7343_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7352_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7373x_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_73f3_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7402_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7402p_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7413_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7443_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7443p_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7452_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7453_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7473x_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_74f3_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7502_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7502p_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7513_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7532_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7542_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7543_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7543p_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7552_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7573x_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_75f3_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7642_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7643_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7662_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7663_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7702_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7702p_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7713_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7713p_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7742_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7763_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7773x_firmware

    < milanpi-sp3_1.0.0.7

  • amd•epyc_7f32_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7f52_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7f72_firmware

    < romepi-sp3_1.0.0.d

  • amd•epyc_7h12_firmware

    < romepi-sp3_1.0.0.d

  • amd•ryzen 5000 series

    various

References (1)