Lucene search

[email protected]CVE-2021-26408

HistoryMay 10, 2022 - 7:15 p.m.

CVE-2021-26408

2022-05-1019:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2021-26408

insufficient validation

elliptic curve points

sev-legacy

firmware

guest migration

integrity

confidentiality

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.1 High

AI Score

Confidence

High

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

0.0004 Low

EPSS

Percentile

12.2%

JSON

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest’s integrity or confidentiality.

CPENameOperatorVersion
amd:epyc_7002_firmwareamd epyc 7002 firmwareltromepi-sp3_1.0.0.c
amd:epyc_7001_firmwareamd epyc 7001 firmwareltnaplespi-sp3_1.0.0.g
amd:epyc_7232p_firmwareamd epyc 7232p firmwareltromepi-sp3_1.0.0.c
amd:epyc_7252_firmwareamd epyc 7252 firmwareltromepi-sp3_1.0.0.c
amd:epyc_7262_firmwareamd epyc 7262 firmwareltromepi-sp3_1.0.0.c
amd:epyc_7272_firmwareamd epyc 7272 firmwareltromepi-sp3_1.0.0.c
amd:epyc_7282_firmwareamd epyc 7282 firmwareltromepi-sp3_1.0.0.c
amd:epyc_7302_firmwareamd epyc 7302 firmwareltromepi-sp3_1.0.0.c
amd:epyc_7302p_firmwareamd epyc 7302p firmwareltromepi-sp3_1.0.0.c
amd:epyc_7352_firmwareamd epyc 7352 firmwareltromepi-sp3_1.0.0.c

CPE	Name	Operator	Version
amd:epyc_7002_firmware	amd epyc 7002 firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7001_firmware	amd epyc 7001 firmware	lt	naplespi-sp3_1.0.0.g
amd:epyc_7232p_firmware	amd epyc 7232p firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7252_firmware	amd epyc 7252 firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7262_firmware	amd epyc 7262 firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7272_firmware	amd epyc 7272 firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7282_firmware	amd epyc 7282 firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7302_firmware	amd epyc 7302 firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7302p_firmware	amd epyc 7302p firmware	lt	romepi-sp3_1.0.0.c
amd:epyc_7352_firmware	amd epyc 7352 firmware	lt	romepi-sp3_1.0.0.c

Rows per page:

1-10 of 381

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

Social References

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.1 High

AI Score

Confidence

High

6.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

0.0004 Low

EPSS

Percentile

12.2%

JSON

Related for CVE-2021-26408

cvelist1 prion1 amd1