Input validation

2023-05-0920:15:00

PRIOn knowledge base

www.prio-n.com

input validation

svc_map_user_stack

amd secure processor

denial of service

loss of integrity

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Insufficient validation of inputs in
SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an
attacker with a malicious Uapp or ABL to send malformed or invalid syscall to
the bootloader resulting in a potential denial of service and loss of
integrity.

CPENameOperatorVersion
epyc_7232p_firmwareeqromepi-1.0.0.e
epyc_7251_firmwareeqnaplespi-1.0.0.j
epyc_7252_firmwareeqromepi-1.0.0.e
epyc_7261_firmwareeqnaplespi-1.0.0.j
epyc_7262_firmwareeqromepi-1.0.0.e
epyc_7272_firmwareeqromepi-1.0.0.e
epyc_7281_firmwareeqnaplespi-1.0.0.j
epyc_7282_firmwareeqromepi-1.0.0.e
epyc_72f3_firmwareeqmilanpi-1.0.0.9
epyc_7301_firmwareeqnaplespi-1.0.0.j

Name	Operator	Version
epyc_7232p_firmware	eq	romepi-1.0.0.e
epyc_7251_firmware	eq	naplespi-1.0.0.j
epyc_7252_firmware	eq	romepi-1.0.0.e
epyc_7261_firmware	eq	naplespi-1.0.0.j
epyc_7262_firmware	eq	romepi-1.0.0.e
epyc_7272_firmware	eq	romepi-1.0.0.e
epyc_7281_firmware	eq	naplespi-1.0.0.j
epyc_7282_firmware	eq	romepi-1.0.0.e
epyc_72f3_firmware	eq	milanpi-1.0.0.9
epyc_7301_firmware	eq	naplespi-1.0.0.j