Vulnerabilities

TI-2021-21486 CVE-2021-46771 · GHSA-qfcc-w88q-7m85

Improper input validation in AMD 3rd Gen AMD EPYC™

LOW 34

Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00303 Published 2022-05-10 Fixed in MilanPI-SP3_1.0.0.4 CWE-20

TI-2021-08151 CVE-2021-26324 · GHSA-r3vf-g82m-5gqf

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.

LOW 34

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00268 Published 2022-05-10 Fixed in MilanPI-SP3_1.0.0.4

TI-2021-08159 CVE-2021-26332 · GHSA-ph9v-43mr-97hw

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential…

LOW 31

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00231 Published 2022-05-10 Fixed in MilanPI-SP3_1.0.0.4

TI-2021-08194 CVE-2021-26370 · GHSA-9hr4-cwvw-3xm2

Improper input validation in AMD 2nd Gen AMD EPYC™

LOW 31

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents re…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00231 Published 2022-05-10 Fixed in RomePI-SP3_1.0.0.C, MilanPI-SP3_1.0.0.4 CWE-20

Vulnerabilities

Filters

Improper input validation in AMD 3rd Gen AMD EPYC™

A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.

Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential…

Improper input validation in AMD 2nd Gen AMD EPYC™