Lucene search

[email protected]CVE-2021-26347

HistoryMay 11, 2022 - 5:15 p.m.

CVE-2021-26347

2022-05-1117:15:08

CWE-1284

[email protected]

web.nvd.nist.gov

cve-2021-26347

asp

amd secure processor

integer overflow

denial of service

nvd

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.

Affected configurations

NVD

Node

amdepyc_7763Match-

AND

amdepyc_7763_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7713pMatch-

AND

amdepyc_7713p_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7713Match-

AND

amdepyc_7713_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7663Match-

AND

amdepyc_7663_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7643Match-

AND

amdepyc_7643_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_75f3Match-

AND

amdepyc_75f3_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7543pMatch-

AND

amdepyc_7543p_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7543Match-

AND

amdepyc_7543_firmwareRange<milanpi-sp3_1.0.0.7

Node

amdepyc_7513_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7513Match-

Node

amdepyc_7453_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7453Match-

Node

amdepyc_74f3_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_74f3Match-

Node

amdepyc_7443p_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7443pMatch-

Node

amdepyc_7443_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7443Match-

Node

amdepyc_7413_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7413Match-

Node

amdepyc_73f3_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_73f3Match-

Node

amdepyc_7343_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7343Match-

Node

amdepyc_7313p_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7313pMatch-

Node

amdepyc_7313_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7313Match-

Node

amdepyc_72f3_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_72f3Match-

Node

amdepyc_7773x_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7773xMatch-

Node

amdepyc_7473x_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7473xMatch-

Node

amdepyc_7573x_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7573xMatch-

Node

amdepyc_7373x_firmwareRange<milanpi-sp3_1.0.0.7

AND

amdepyc_7373xMatch-

Node

amdepyc_7002_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7002Match-

Node

amdepyc_7232p_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7232pMatch-

Node

amdepyc_7252_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7252Match-

Node

amdepyc_7262_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7262Match-

Node

amdepyc_7272_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7272Match-

Node

amdepyc_7282_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7282Match-

Node

amdepyc_7302_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7302Match-

Node

amdepyc_7302p_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7302pMatch-

Node

amdepyc_7352_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7352Match-

Node

amdepyc_7402_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7402Match-

Node

amdepyc_7402p_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7402pMatch-

Node

amdepyc_7452_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7452Match-

Node

amdepyc_7502_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7502Match-

Node

amdepyc_7502p_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7502pMatch-

Node

amdepyc_7532_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7532Match-

Node

amdepyc_7542_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7542Match-

Node

amdepyc_7552_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7552Match-

Node

amdepyc_7642_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7642Match-

Node

amdepyc_7662_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7662Match-

Node

amdepyc_7702_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7702Match-

Node

amdepyc_7702p_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7702pMatch-

Node

amdepyc_7742_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7742Match-

Node

amdepyc_7f32_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7f32Match-

Node

amdepyc_7h12_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7h12Match-

Node

amdepyc_7f72_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7f72Match-

Node

amdepyc_7f52_firmwareRange<romepi-sp3_1.0.0.d

AND

amdepyc_7f52Match-

CPENameOperatorVersion
amd:epyc_7763_firmwareamd epyc 7763 firmwareltmilanpi-sp3_1.0.0.7

CPE	Name	Operator	Version
amd:epyc_7763_firmware	amd epyc 7763 firmware	lt	milanpi-sp3_1.0.0.7

CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen 5000 Series",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031

Social References

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-26347

prion1 cvelist1 nvd1 suse2 nessus5 openvas7 amd1