Lucene search
+L

CVE-2021-26398

🗓️ 10 Jan 2023 20:56:40Reported by AMDType 
cvelist
 cvelist
🔗 www.cve.org👁 50 Views

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP OS memory leading to potential arbitrary code execution

Related
Affected
Refs
ReporterTitlePublishedViews
Family
amd
Amd
AMD Server Vulnerabilities – January 2023
10 Jan 202300:00
–amd
bdu_fstec
BDU FSTEC
AMD Secure Processor Code Execution
20 Feb 202300:00
–bdu_fstec
circl
Circl
CVE-2021-26398
9 Apr 202514:48
–circl
cnnvd
CNNVD
AMD Secure Processor 缓冲区错误漏洞
11 Jan 202300:00
–cnnvd
cve
CVE
CVE-2021-26398
10 Jan 202320:56
–cve
euvd
EUVD
EUVD-2021-13204
7 Oct 202500:30
–euvd
hpe
HPE Security Bulletins
HPESBHF04404 rev.1 - HPE ProLiant Gen10 and Gen10 Plus Servers Using Certain AMD EPYC Processors, Multiple Local Vulnerabilities
20 Jan 202300:00
–hpe
ncsc
NCSC
Vulnerabilities fixed in Dell PowerEdge
13 Jan 202300:00
–ncsc
nvd
NVD
CVE-2021-26398
11 Jan 202308:15
–nvd
osv_cve
osv_cve
CVE-2021-26398
11 Jan 202308:15
–osv_cve
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA ",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen EPYC ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "Various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Jan 2023 07:01Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.8
EPSS0.00212
SSVC
50