Input validation

2021-11-1619:15:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP

CPENameOperatorVersion
epyc_7232p_firmwareeq< romepisp31.0.0.c
epyc_7251_firmwareeq< naplespisp31.0.0.g
epyc_7252_firmwareeq< romepisp31.0.0.c
epyc_7261_firmwareeq< naplespisp31.0.0.g
epyc_7262_firmwareeq< romepisp31.0.0.c
epyc_7272_firmwareeq< romepisp31.0.0.c
epyc_7281_firmwareeq< naplespisp31.0.0.g
epyc_7282_firmwareeq< romepisp31.0.0.c
epyc_72f3_firmwareeq< milanpisp31.0.0.4
epyc_7301_firmwareeq< naplespisp31.0.0.g

Name	Operator	Version
epyc_7232p_firmware	eq	< romepisp31.0.0.c
epyc_7251_firmware	eq	< naplespisp31.0.0.g
epyc_7252_firmware	eq	< romepisp31.0.0.c
epyc_7261_firmware	eq	< naplespisp31.0.0.g
epyc_7262_firmware	eq	< romepisp31.0.0.c
epyc_7272_firmware	eq	< romepisp31.0.0.c
epyc_7281_firmware	eq	< naplespisp31.0.0.g
epyc_7282_firmware	eq	< romepisp31.0.0.c
epyc_72f3_firmware	eq	< milanpisp31.0.0.4
epyc_7301_firmware	eq	< naplespisp31.0.0.g