Lucene search

K
cveAMDCVE-2021-26346
HistoryJan 11, 2023 - 8:15 a.m.

CVE-2021-26346

2023-01-1108:15:10
CWE-190
AMD
web.nvd.nist.gov
41
cve-2021-26346
asp
bootloader
integer overflow
denial of service
nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6

Confidence

High

EPSS

0

Percentile

12.7%

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Affected configurations

Nvd
Node
amdryzen_3_3100_firmwareMatch-
AND
amdryzen_3_3100Match-
Node
amdryzen_3_3200g_firmwareMatch-
AND
amdryzen_3_3200gMatch-
Node
amdryzen_3_3200u_firmwareMatch-
AND
amdryzen_3_3200uMatch-
Node
amdryzen_3_3250c_firmwareMatch-
AND
amdryzen_3_3250cMatch-
Node
amdryzen_3_3250u_firmwareMatch-
AND
amdryzen_3_3250uMatch-
Node
amdryzen_3_3300g_firmwareMatch-
AND
amdryzen_3_3300gMatch-
Node
amdryzen_3_3300u_firmwareMatch-
AND
amdryzen_3_3300uMatch-
Node
amdryzen_3_3300x_firmwareMatch-
AND
amdryzen_3_3300xMatch-
Node
amdryzen_3_3350u_firmwareMatch-
AND
amdryzen_3_3350uMatch-
Node
amdryzen_3_3450u_firmwareMatch-
AND
amdryzen_3_3450uMatch-
Node
amdryzen_3_3500c_firmwareMatch-
AND
amdryzen_3_3500cMatch-
Node
amdryzen_3_3500u_firmwareMatch-
AND
amdryzen_3_3500uMatch-
Node
amdryzen_3_3550h_firmwareMatch-
AND
amdryzen_3_3550hMatch-
Node
amdryzen_3_3580u_firmwareMatch-
AND
amdryzen_3_3580uMatch-
Node
amdryzen_3_3700c_firmwareMatch-
AND
amdryzen_3_3700cMatch-
Node
amdryzen_3_3700u_firmwareMatch-
AND
amdryzen_3_3700uMatch-
Node
amdryzen_3_3750h_firmwareMatch-
AND
amdryzen_3_3750hMatch-
Node
amdryzen_3_3780u_firmwareMatch-
AND
amdryzen_3_3780uMatch-
Node
amdryzen_3_5125c_firmwareMatch-
AND
amdryzen_3_5125cMatch-
Node
amdryzen_3_5300g_firmwareMatch-
AND
amdryzen_3_5300gMatch-
Node
amdryzen_3_5300ge_firmwareMatch-
AND
amdryzen_3_5300geMatch-
Node
amdryzen_3_5300u_firmwareMatch-
AND
amdryzen_3_5300uMatch-
Node
amdryzen_3_5400u_firmwareMatch-
AND
amdryzen_3_5400uMatch-
Node
amdryzen_3_5425c_firmwareMatch-
AND
amdryzen_3_5425cMatch-
Node
amdryzen_3_5425u_firmwareMatch-
AND
amdryzen_3_5425uMatch-
Node
amdryzen_3_pro_3200g_firmwareMatch-
AND
amdryzen_3_pro_3200gMatch-
Node
amdryzen_3_pro_3200ge_firmwareMatch-
AND
amdryzen_3_pro_3200geMatch-
Node
amdryzen_3_pro_3300u_firmwareMatch-
AND
amdryzen_3_pro_3300uMatch-
Node
amdryzen_5_3400g_firmwareMatch-
AND
amdryzen_5_3400gMatch-
Node
amdryzen_5_3450g_firmwareMatch-
AND
amdryzen_5_3450gMatch-
Node
amdryzen_5_3450u_firmwareMatch-
AND
amdryzen_5_3450uMatch-
Node
amdryzen_5_3500_firmwareMatch-
AND
amdryzen_5_3500Match-
Node
amdryzen_5_3500c_firmwareMatch-
AND
amdryzen_5_3500cMatch-
Node
amdryzen_5_3500u_firmwareMatch-
AND
amdryzen_5_3500uMatch-
Node
amdryzen_5_3500x_firmwareMatch-
AND
amdryzen_5_3500xMatch-
Node
amdryzen_5_3550h_firmwareMatch-
AND
amdryzen_5_3550hMatch-
Node
amdryzen_5_3580u_firmwareMatch-
AND
amdryzen_5_3580uMatch-
Node
amdryzen_5_3600_firmwareMatch-
AND
amdryzen_5_3600Match-
Node
amdryzen_5_3600x_firmwareMatch-
AND
amdryzen_5_3600xMatch-
Node
amdryzen_5_3600xt_firmwareMatch-
AND
amdryzen_5_3600xtMatch-
Node
amdryzen_5_5500_firmwareMatch-
AND
amdryzen_5_5500Match-
Node
amdryzen_5_5500u_firmwareMatch-
AND
amdryzen_5_5500uMatch-
Node
amdryzen_5_5560u_firmwareMatch-
AND
amdryzen_5_5560uMatch-
Node
amdryzen_5_5600_firmwareMatch-
AND
amdryzen_5_5600Match-
Node
amdryzen_5_5600g_firmwareMatch-
AND
amdryzen_5_5600gMatch-
Node
amdryzen_5_5600ge_firmwareMatch-
AND
amdryzen_5_5600geMatch-
Node
amdryzen_5_5600h_firmwareMatch-
AND
amdryzen_5_5600hMatch-
Node
amdryzen_5_5600hs_firmwareMatch-
AND
amdryzen_5_5600hsMatch-
Node
amdryzen_5_5600u_firmwareMatch-
AND
amdryzen_5_5600uMatch-
Node
amdryzen_5_5600x_firmwareMatch-
AND
amdryzen_5_5600xMatch-
Node
amdryzen_5_5625c_firmwareMatch-
AND
amdryzen_5_5625cMatch-
Node
amdryzen_5_5625u_firmwareMatch-
AND
amdryzen_5_5625uMatch-
Node
amdryzen_5_5700g_firmwareMatch-
AND
amdryzen_5_5700gMatch-
Node
amdryzen_5_5700ge_firmwareMatch-
AND
amdryzen_5_5700geMatch-
Node
amdryzen_5_pro_3350g_firmwareMatch-
AND
amdryzen_5_pro_3350gMatch-
Node
amdryzen_5_pro_3350ge_firmwareMatch-
AND
amdryzen_5_pro_3350geMatch-
Node
amdryzen_5_pro_3400g_firmwareMatch-
AND
amdryzen_5_pro_3400gMatch-
Node
amdryzen_5_pro_3400ge_firmwareMatch-
AND
amdryzen_5_pro_3400geMatch-
Node
amdryzen_5_pro_3500u_firmwareMatch-
AND
amdryzen_5_pro_3500uMatch-
Node
amdryzen_7_3700c_firmwareMatch-
AND
amdryzen_7_3700cMatch-
Node
amdryzen_7_3700u_firmwareMatch-
AND
amdryzen_7_3700uMatch-
Node
amdryzen_7_3700x_firmwareMatch-
AND
amdryzen_7_3700xMatch-
Node
amdryzen_7_3750h_firmwareMatch-
AND
amdryzen_7_3750hMatch-
Node
amdryzen_7_3780u_firmwareMatch-
AND
amdryzen_7_3780uMatch-
Node
amdryzen_7_3800x_firmwareMatch-
AND
amdryzen_7_3800xMatch-
Node
amdryzen_7_3800xt_firmwareMatch-
AND
amdryzen_7_3800xtMatch-
Node
amdryzen_7_5700g_firmwareMatch-
AND
amdryzen_7_5700gMatch-
Node
amdryzen_7_5700ge_firmwareMatch-
AND
amdryzen_7_5700geMatch-
Node
amdryzen_7_5700u_firmwareMatch-
AND
amdryzen_7_5700uMatch-
Node
amdryzen_7_5700x_firmwareMatch-
AND
amdryzen_7_5700xMatch-
Node
amdryzen_7_5800_firmwareMatch-
AND
amdryzen_7_5800Match-
Node
amdryzen_7_5800h_firmwareMatch-
AND
amdryzen_7_5800hMatch-
Node
amdryzen_7_5800hs_firmwareMatch-
AND
amdryzen_7_5800hsMatch-
Node
amdryzen_7_5800u_firmwareMatch-
AND
amdryzen_7_5800uMatch-
Node
amdryzen_7_5800x_firmwareMatch-
AND
amdryzen_7_5800xMatch-
Node
amdryzen_7_5800x3d_firmwareMatch-
AND
amdryzen_7_5800x3dMatch-
Node
amdryzen_7_5825c_firmwareMatch-
AND
amdryzen_7_5825cMatch-
Node
amdryzen_7_5825u_firmwareMatch-
AND
amdryzen_7_5825uMatch-
Node
amdryzen_7_pro_3700u_firmwareMatch-
AND
amdryzen_7_pro_3700uMatch-
Node
amdryzen_9_3900_firmwareMatch-
AND
amdryzen_9_3900Match-
Node
amdryzen_9_3900x_firmwareMatch-
AND
amdryzen_9_3900xMatch-
Node
amdryzen_9_3900xt_firmwareMatch-
AND
amdryzen_9_3900xtMatch-
Node
amdryzen_9_3950x_firmwareMatch-
AND
amdryzen_9_3950xMatch-
Node
amdryzen_9_5900_firmwareMatch-
AND
amdryzen_9_5900Match-
Node
amdryzen_9_5900hs_firmwareMatch-
AND
amdryzen_9_5900hsMatch-
Node
amdryzen_9_5900hx_firmwareMatch-
AND
amdryzen_9_5900hxMatch-
Node
amdryzen_9_5900x_firmwareMatch-
AND
amdryzen_9_5900xMatch-
Node
amdryzen_9_5950x_firmwareMatch-
AND
amdryzen_9_5950xMatch-
Node
amdryzen_9_5980hs_firmwareMatch-
AND
amdryzen_9_5980hsMatch-
Node
amdryzen_9_5980hx_firmwareMatch-
AND
amdryzen_9_5980hxMatch-
Node
amdryzen_pro_3200g_firmwareMatch-
AND
amdryzen_pro_3200gMatch-
Node
amdryzen_pro_3200ge_firmwareMatch-
AND
amdryzen_pro_3200geMatch-
Node
amdryzen_pro_3350g_firmwareMatch-
AND
amdryzen_pro_3350gMatch-
Node
amdryzen_pro_3400g_firmwareMatch-
AND
amdryzen_pro_3400gMatch-
Node
amdryzen_pro_3400ge_firmwareMatch-
AND
amdryzen_pro_3400geMatch-
Node
amdryzen_pro_3600_firmwareMatch-
AND
amdryzen_pro_3600Match-
Node
amdryzen_pro_3700_firmwareMatch-
AND
amdryzen_pro_3700Match-
Node
amdryzen_pro_3900_firmwareMatch-
AND
amdryzen_pro_3900Match-
Node
amdryzen_pro_5350g_firmwareMatch-
AND
amdryzen_pro_5350gMatch-
Node
amdryzen_pro_5350ge_firmwareMatch-
AND
amdryzen_pro_5350geMatch-
Node
amdryzen_pro_5650g_firmwareMatch-
AND
amdryzen_pro_5650gMatch-
Node
amdryzen_pro_5650ge_firmwareMatch-
AND
amdryzen_pro_5650geMatch-
Node
amdryzen_pro_5750g_firmwareMatch-
AND
amdryzen_pro_5750gMatch-
Node
amdryzen_pro_5750ge_firmwareMatch-
AND
amdryzen_pro_5750geMatch-
VendorProductVersionCPE
amdryzen_3_3100_firmware-cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3100-cpe:2.3:h:amd:ryzen_3_3100:-:*:*:*:*:*:*:*
amdryzen_3_3200g_firmware-cpe:2.3:o:amd:ryzen_3_3200g_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3200g-cpe:2.3:h:amd:ryzen_3_3200g:-:*:*:*:*:*:*:*
amdryzen_3_3200u_firmware-cpe:2.3:o:amd:ryzen_3_3200u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3200u-cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:*
amdryzen_3_3250c_firmware-cpe:2.3:o:amd:ryzen_3_3250c_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3250c-cpe:2.3:h:amd:ryzen_3_3250c:-:*:*:*:*:*:*:*
amdryzen_3_3250u_firmware-cpe:2.3:o:amd:ryzen_3_3250u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_3250u-cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 2081

CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen 5000 Series",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6

Confidence

High

EPSS

0

Percentile

12.7%

Related for CVE-2021-26346