AMD 2nd Gen EPYC
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20532 | various | Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service. | MEDIUM 5.3 | 0.6 % | ||
| CVE-2023-20531 | various | Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resultin | HIGH 7.5 | 0.6 % | ||
| CVE-2023-20529 | various | Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in | HIGH 7.5 | 0.6 % | ||
| CVE-2023-20528 | various | Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leadin | LOW 2.4 | 0.3 % | ||
| CVE-2023-20527 | various | Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-20525 | various | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped re | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-20523 | various | TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of s | MEDIUM 5.7 | 0.2 % | ||
| CVE-2023-20522 | various | Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service. | HIGH 7.5 | 0.6 % | ||
| CVE-2022-23813 | various | The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest me | MEDIUM 5.3 | 0.5 % | ||
| CVE-2021-46779 | various | Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP | HIGH 7.1 | 0.2 % | ||
| CVE-2021-46768 | various | Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potent | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-46767 | various | Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading | MEDIUM 6.1 | 0.3 % | ||
| CVE-2021-26407 | various | A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclo | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26403 | various | Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confide | MEDIUM 6.5 | 0.1 % | ||
| CVE-2021-26402 | Various | Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write par | HIGH 7.1 | 0.2 % | ||
| CVE-2021-26398 | Various | Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (A | HIGH 7.8 | 0.2 % | ||
| CVE-2021-26316 | Various | Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting | HIGH 7.8 | 0.3 % | ||
| CVE-2021-39298 | Various | A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM | HIGH 8.8 | 0.4 % |