Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessoren ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Daten zu manipulieren.
Product
Prozessoren sind die zentralen Rechenwerke eines Computers.
Vulnerabilities 31
-
High 7.8
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with…
-
High 7.8
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker …
-
High 7.8
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attac…
-
High 7.8
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially res…
-
High 7.5
Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of servi…
-
High 7.5
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value pote…
-
High 7.5
Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resu…
-
High 7.5
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value…
-
High 7.1
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an …
-
High 7.1
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an at…
-
Medium 6.5
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in com…
-
Medium 6.5
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…
-
Medium 6.5
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the …
-
Medium 6.5
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, p…
-
Medium 6.1
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memor…
-
Medium 5.7
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of int…
-
Medium 5.5
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conte…
-
Medium 5.5
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an …
-
Medium 5.5
Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers …
-
Medium 5.5
Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential inform…
-
Medium 5.5
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting …
-
Medium 5.5
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the AS…
-
Medium 5.5
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted…
-
Medium 5.3
The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of …
-
Medium 5.3
Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of gues…
-
Medium 5.3
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a…
-
Medium 4.7
A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the …
-
Medium 4.4
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity fo…
-
Medium 4.4
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity…
-
Low 2.4
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C b…
-
Unscored —
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partial…
Revision history
-
#5
Neue Updates von HP und LENOVO aufgenommen
-
#4
Neue Updates von Dell aufgenommen
-
#3
Neue Updates von HP aufgenommen
-
#2
Neue Updates von HP aufgenommen
-
#1
Initiale Fassung
References
-
Lenovo Security Advisory: LEN-124495
https://support.lenovo.com/de/de/product_security/ps500559-multi-vendor-bios-security-vulnerabilities-may-2023
-
HP Security Bulletin HPSBHF03846 vom 2023-05-11
https://support.hp.com/us-en/document/ish_8109529-8109560-16/HPSBHF03846
-
Dell Security Advisory DSA-2023-002
https://www.dell.com/support/kbdoc/de-de/000207371/dsa-2023-002-dell-poweredge-server-security-update-for-amd-server-vulnerabilities
-
AMD Client Vulnerabilities - January 2023 vom 2023-01-10
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1031
-
AMD Server Vulnerabilities - January 2023 vom 2023-01-10
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1032
-
Lenovo Security Advisory vom 2023-01-10
https://support.lenovo.com/de/de/product_security/ps500538-amd-server-vulnerabilities-january-2023
-
Lenovo Security Advisory vom 2023-01-10
https://support.lenovo.com/de/de/product_security/ps500539-amd-client-vulnerabilities-january-2023
-
HP Security Bulletin HPSBHF03831 vom 2023-01-11
https://support.hp.com/us-en/document/ish_7491443-7491471-16/HPSBHF03831
-
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04404