Summary
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessoren ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
Product
Prozessoren sind die zentralen Rechenwerke eines Computers.
Vulnerabilities 52
-
High 8.8
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler pot…
-
High 8.8
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handle…
-
High 7.8
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
-
High 7.8
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …
-
High 7.8
Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged use…
-
High 7.8
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privile…
-
High 7.8
Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot…
-
High 7.8
Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
High 7.8
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…
-
High 7.8
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user …
-
Medium 6.7
Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user …
-
Medium 6.7
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to p…
-
Medium 6.5
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…
-
Medium 5.5
Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena…
-
Medium 5.5
Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow…
-
Medium 5.5
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an auth…
-
Low 2.4
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow …
-
Unscored —
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their …
-
Unscored —
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
-
Unscored —
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and d…
-
Unscored —
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operati…
-
Unscored —
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to …
-
Unscored —
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker …
-
Unscored —
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device…
-
Unscored —
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a…
-
Unscored —
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to u…
-
Unscored —
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could resul…
-
Unscored —
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address…
-
Unscored —
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU …
-
Unscored —
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of o…
-
Unscored —
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an …
-
Unscored —
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device…
-
Unscored —
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into…
-
Unscored —
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register…
-
Unscored —
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/wr…
-
Unscored —
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to inva…
-
Unscored —
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrat…
-
Unscored —
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in map…
-
Unscored —
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to o…
-
Unscored —
Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM…
-
Unscored —
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM result…
-
Unscored —
Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser pri…
-
Unscored —
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, re…
-
Unscored —
Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid addres…
-
Unscored —
Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could res…
-
Unscored —
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/t…
-
Unscored —
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulti…
-
Unscored —
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that cou…
-
Unscored —
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info d…
-
Unscored —
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootl…
-
Unscored —
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposi…
-
Unscored —
A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading t…
Revision history
-
#13
Neue Updates von openSUSE aufgenommen
-
#12
Neue Updates von openSUSE aufgenommen
-
#11
Neue Updates von AMD aufgenommen
-
#10
CVE's ergänzt
-
#9
Neue Updates von HP aufgenommen
-
#8
Neue Updates von Amazon aufgenommen
-
#7
Neue Updates von Amazon aufgenommen
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von Amazon und SUSE aufgenommen
-
#3
Neue Updates von HPE aufgenommen
-
#2
Neue Updates von HP aufgenommen
-
#1
Initiale Fassung
References
-
AMD Security Advisory vom 2022-05-10
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
-
AMD Security Advisory vom 2022-05-10
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
-
Lenovo Security Advisory vom 2022-05-10
https://support.lenovo.com/us/en/product_security/LEN-87863
-
HP Security Bulletin HPSBHF03792 vom 2022-05-12
https://support.hp.com/us-en/document/ish_6189684-6189764-16/HPSBHF03792
-
HPE Security Bulletin HPESBHF04235 vom 2022-05-17
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04235en_us&hprpt_id=ALERT_HPE_3023598&jumpid=em_pom8nu6hj_aid-520066529
-
Amazon Linux Security Advisory ALAS-2022-070 vom 2022-05-20
https://alas.aws.amazon.com/AL2022/ALAS-2022-070.html
-
SUSE Security Update SUSE-SU-2022:1751-1 vom 2022-05-19
https://lists.suse.com/pipermail/sle-security-updates/2022-May/011100.html
-
SUSE Security Update SUSE-SU-2022:1847-1 vom 2022-05-25
https://lists.suse.com/pipermail/sle-security-updates/2022-May/011162.html
-
SUSE Security Update SUSE-SU-2022:1840-1 vom 2022-05-25
https://lists.suse.com/pipermail/sle-security-updates/2022-May/011156.html
-
SUSE Security Update SUSE-SU-2022:1846-1 vom 2022-05-25
https://lists.suse.com/pipermail/sle-security-updates/2022-May/011160.html
-
SUSE Security Update SUSE-SU-2022:1923-1 vom 2022-06-02
https://lists.suse.com/pipermail/sle-security-updates/2022-June/011226.html
-
Amazon Linux Security Advisory ALAS2-2022-1800 vom 2022-06-07
https://alas.aws.amazon.com/AL2/ALAS-2022-1800.html
-
Amazon Linux Security Advisory ALAS-2022-1606 vom 2022-07-07
https://alas.aws.amazon.com/ALAS-2022-1606.html
-
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04404
-
AMD Security Bulletin
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5001.html
-
openSUSE Security Update OPENSUSE-SU-2025:14775-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IDYBISXNIKR4JQNKOAZNM4IWBORGXDGT/
-
openSUSE Security Update OPENSUSE-SU-2025:14796-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/JRVYJFDMGL4ZFIAYJKJTQHRR5SPMPZJ2/
-
openSUSE Security Update OPENSUSE-SU-2025:14777-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/K4CQIJEA5UAOBWUSUVTBHDHKQNBQURQG/
-
openSUSE Security Update OPENSUSE-SU-2025:14800-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XIORKETHKWBJRRYF55G3J3DL3T7QGOEL/
-
openSUSE Security Update OPENSUSE-SU-2025:14770-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WU6USOH6Z5LBH65E37F7SXQ2ZCYMYO4C/
-
openSUSE Security Update OPENSUSE-SU-2025:14776-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5VY6LKWXFA5DZKFFJWA52HJLZ3GJXUDB/
-
openSUSE Security Update OPENSUSE-SU-2025:14797-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RLB6EQ4PQFULA6326VPRQRWW66T32SST/
-
openSUSE Security Update OPENSUSE-SU-2025:14787-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FWMIURVH3RGSXYDDHGU2A5NU4OI3OLPB/
-
openSUSE Security Update OPENSUSE-SU-2025:14778-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/E3XCURBMJRRPRVU3EVKDNACDUEBSYOCK/
-
openSUSE Security Update OPENSUSE-SU-2025:14791-1 vom 2025-02-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ILZHMVR4NNCE6NWCEPZ2BVWZXYSWRTS/
-
openSUSE Security Update OPENSUSE-SU-2025:14804-1 vom 2025-02-14
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EISBLM6MW64JFKX5G6QNSKXKI34QXKQ4/