Lucene search
K

CVE-2021-26398

🗓️ 10 Jan 2023 20:56:40Reported by AMDType 
cvelist
 cvelist
🔗 www.cve.org👁 20 Views

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP OS memory leading to potential arbitrary code execution

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Amd
AMD Server Vulnerabilities – January 2023
10 Jan 202300:00
amd
BDU FSTEC
The vulnerability of the implementation of the AMD Secure Processor (ASP) microprogramming software for AMD processors allows a hacker to execute arbitrary code.
20 Feb 202300:00
bdu_fstec
Circl
CVE-2021-26398
9 Apr 202514:48
circl
CNNVD
AMD Secure Processor 缓冲区错误漏洞
11 Jan 202300:00
cnnvd
CVE
CVE-2021-26398
10 Jan 202320:56
cve
EUVD
EUVD-2021-13204
7 Oct 202500:30
euvd
NCSC
Vulnerabilities fixed in Dell PowerEdge
13 Jan 202300:00
ncsc
NVD
CVE-2021-26398
11 Jan 202308:15
nvd
OSV
CVE-2021-26398
11 Jan 202308:15
osv
Prion
Input validation
11 Jan 202308:15
prion
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA ",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen EPYC ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "Various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Jan 2023 07:01Current
7.8High risk
Vulners AI Score7.8
EPSS0.00212
20