Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessoren ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.
Product
Prozessoren sind die zentralen Rechenwerke eines Computers.
Vulnerabilities 29
-
Critical 9.8
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, pote…
-
Critical 9.8
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-o…
-
Critical 9.8
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-…
-
Critical 9.1
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker…
-
Critical 9.1
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attac…
-
High 8.8
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA co…
-
High 8.8
Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a…
-
High 8.2
Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading t…
-
High 7.8
Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker …
-
High 7.5
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtua…
-
High 7.5
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Managemen…
-
High 7.5
Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attac…
-
High 7.5
Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shar…
-
High 7.5
Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the A…
-
High 7.5
Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads …
-
High 7.5
Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Managemen…
-
High 7.5
Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest…
-
High 7.5
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out…
-
High 7.4
A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially r…
-
High 7.1
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory loca…
-
Medium 6.8
Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, p…
-
Medium 6.1
Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access…
-
Medium 5.9
Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race…
-
Medium 5.5
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause…
-
Medium 5.5
A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure …
-
Low 3.9
Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of int…
-
Unscored —
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing…
-
Unscored —
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenti…
-
Unscored —
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uap…
Revision history
-
#5
Neue Updates von AMD aufgenommen
-
#4
Neue Updates von Dell aufgenommen
-
#3
Neue Updates von HP aufgenommen
-
#2
Neue Updates von HP und LENOVO aufgenommen
-
#1
Initiale Fassung
References
-
AMD Security Advisory vom 2023-05-09
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3001.html
-
AMD Security Advisory vom 2023-05-09
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4001.html
-
HP Security Bulletin HPSBHF03846 vom 2023-05-11
https://support.hp.com/us-en/document/ish_8109529-8109560-16/HPSBHF03846
-
Lenovo Security Advisory: LEN-124495
https://support.lenovo.com/de/de/product_security/ps500559-multi-vendor-bios-security-vulnerabilities-may-2023
-
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04471en_us
-
Dell Security Advisory DSA-2023-105 vom 2023-05-10
https://www.dell.com/support/kbdoc/de-de/000213267/dsa-2023-105-security-update-for-dell-poweredge-server-for-amd-server-vulnerabilities
-
AMD Security Bulletin
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5001.html