AMD Prozessor: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 17

• High 7.8
  CVE-2023-20563

  Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of…

  AMD AMD Ryzen™Embedded V3000 Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” AMD Ryzen™ Embedded 5000
  Nov 14, 2023
• High 7.5
  CVE-2022-23820

  Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to …

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
  Nov 14, 2023
• Medium 6.7
  CVE-2021-46774

  Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inv…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 2nd Gen AMD EPYC™ Processors
  Nov 14, 2023
• Medium 6.1
  CVE-2023-20533

  Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inv…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 2nd Gen AMD EPYC™ Processors
  Nov 14, 2023
• Medium 5.3
  CVE-2023-20566

  Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integr…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 4th Gen AMD EPYC™ Processors
  Nov 14, 2023
• Low 3.3
  CVE-2023-20521

  TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory con…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 2nd Gen AMD EPYC™ Processors
  Nov 14, 2023
• Low 2.5
  CVE-2021-46766

  Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP…

  AMD 4th Gen AMD EPYC™ Processors AMD EPYC™ Embedded 9003 Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS
  Nov 14, 2023
• Low 1.9
  CVE-2021-26345

  Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 2nd Gen AMD EPYC™ Processors
  Nov 14, 2023
• Low 1.9
  CVE-2022-23830

  SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 4th Gen AMD EPY™ Processors
  Nov 14, 2023
• Low 1.9
  CVE-2023-20526

  Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 2nd Gen AMD EPYC™ Processors
  Nov 14, 2023
• Unscored —
  CVE-2021-46758

  Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to re…

  AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
  Nov 14, 2023
• Unscored —
  CVE-2022-23821

  Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading t…

  AMD AMD Ryzen™Embedded V3000 AMD Ryzen™ Embedded V2000 Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
  Nov 14, 2023
• Unscored —
  CVE-2023-20519

  A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masqu…

  AMD 3rd Gen AMD EPYC™ Processors 4th Gen AMD EPYC™ Processors
  Nov 14, 2023
• Unscored —
  CVE-2023-20565

  Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of…

  AMD AMD Ryzen™Embedded V3000 Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
  Nov 14, 2023
• Unscored —
  CVE-2023-20571

  A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage …

  AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
  Nov 14, 2023
• Unscored —
  CVE-2023-20592

  Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervi…

  AMD 3rd Gen AMD EPYC™ Processors 2nd Gen AMD EPYC™ Processors 1st Gen AMD EPYC™ Processors Debian Ubuntu
  Nov 14, 2023
• Unscored —
  CVE-2023-20596

  Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 acce…

  AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"
  Nov 14, 2023

Revision history

1. 2024-12-15 #19

   Neue Updates von IBM aufgenommen

2. 2024-10-17 #18

   Neue Updates von IBM aufgenommen

3. 2024-07-16 #17

   Neue Updates von Red Hat aufgenommen

4. 2024-07-09 #16

   Neue Updates von SUSE aufgenommen

5. 2024-06-27 #15

   Neue Updates von HP aufgenommen

6. 2024-05-28 #14

   Neue Updates von Oracle Linux aufgenommen

7. 2024-05-21 #13

   Neue Updates von Red Hat aufgenommen

8. 2024-05-01 #12

   Neue Updates von Dell aufgenommen

9. 2024-03-05 #11

   Neue Updates von Red Hat aufgenommen

10. 2024-02-25 #10

    Neue Updates von Red Hat aufgenommen

11. 2024-02-20 #9

    Neue Updates von CentOS aufgenommen

12. 2024-02-13 #8

    Neue Updates von AMD aufgenommen

13. 2024-02-08 #7

    Neue Updates von Red Hat aufgenommen

14. 2024-01-07 #6

    Neue Updates von HP aufgenommen

15. 2023-12-14 #5

    Neue Updates von SUSE aufgenommen

16. 2023-12-12 #4

    Neue Updates von Dell aufgenommen

17. 2023-12-07 #3

    Neue Updates von HP aufgenommen

18. 2023-12-06 #2

    Neue Updates von SUSE und Dell aufgenommen

19. 2023-11-14 #1

    Initiale Fassung

References

• AMD Security Bulletin vom 2023-11-14
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3002.html
• AMD Security Bulletin vom 2023-11-14
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4002.html
• AMD Security Bulletin vom 2023-11-14
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3005.html
• AMD Security Bulletin vom 2023-11-14
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7011.html
• Lenovo Multi-vendor BIOS Security Vulnerabilities
  https://support.lenovo.com/de/de/product_security/ps500589-multi-vendor-bios-security-vulnerabilities-november-2023
• SUSE Security Update SUSE-SU-2023:4654-1 vom 2023-12-06
  https://lists.suse.com/pipermail/sle-security-updates/2023-December/017285.html
• Dell Security Advisory DSA-2023-442 vom 2023-12-07
  https://www.dell.com/support/kbdoc/000220057/dsa-2023-=
• Dell Security Advisory DSA-2023-457 vom 2023-12-07
  https://www.dell.com/support/kbdoc/000220223/dsa-2023-=
• Dell Security Advisory DSA-2023-441 vom 2023-12-07
  https://www.dell.com/support/kbdoc/000220054/dsa-2023-=
• HP Security Bulletin HPSBHF03893 vom 2023-12-08
  https://support.hp.com/us-en/document/ish_9799938-9799975-16/HPSBHF03893
• Dell Security Advisory DSA-2023-386 vom 2023-12-13
  https://www.dell.com/support/kbdoc/000218423/dsa-2023-=
• SUSE Security Update SUSE-SU-2023:4665-1 vom 2023-12-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-December/017397.html
• SUSE Security Update SUSE-SU-2023:4655-1 vom 2023-12-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-December/017401.html
• SUSE Security Update SUSE-SU-2023:4664-1 vom 2023-12-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-December/017396.html
• SUSE Security Update SUSE-SU-2023:4660-1 vom 2023-12-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-December/017402.html
• HP Security Bulletin HPSBHF03892 vom 2024-01-08
  https://support.hp.com/us-en/document/ish_9925738-9925742-16/HPSBHF03892
• Red Hat Security Advisory RHSA-2024:0753 vom 2024-02-08
  https://access.redhat.com/errata/RHSA-2024:0753
• AMD Security Bulletin
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5001.html
• CentOS Security Advisory CESA-2024:0753 vom 2024-02-20
  https://lists.centos.org/pipermail/centos-announce/2024-February/099225.html
• Red Hat Security Advisory RHSA-2024:0979 vom 2024-02-26
  https://access.redhat.com/errata/RHSA-2024:0979
• Red Hat Security Advisory RHSA-2024:0978 vom 2024-02-26
  https://access.redhat.com/errata/RHSA-2024:0978
• RedHat Security Advisory
  https://access.redhat.com/errata/RHSA-2024:1112
• Dell Security Advisory DSA-2023-332 vom 2024-05-01
  https://www.dell.com/support/kbdoc/000217573/dsa-2023-=
• Red Hat Security Advisory RHSA-2024:3178 vom 2024-05-22
  https://access.redhat.com/errata/RHSA-2024:3178
• Oracle Linux Security Advisory ELSA-2024-3178 vom 2024-05-28
  https://linux.oracle.com/errata/ELSA-2024-3178.html
• HPE SECURITY BULLETIN HPESBCR04657 vom 2024-06-27
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04657en_us&docLocale=en_US
• SUSE Security Update SUSE-SU-2024:2376-1 vom 2024-07-09
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018914.html
• Red Hat Security Advisory RHSA-2024:4575 vom 2024-07-17
  https://access.redhat.com/errata/RHSA-2024:4575
• IBM Security Bulletin 7173420 vom 2024-10-17
  https://www.ibm.com/support/pages/node/7173420
• IBM Security Bulletin 7178944 vom 2024-12-14
  https://www.ibm.com/support/pages/node/7178944