CVE-2021-26338

The CVE targets AMD's System Management Unit (SMU) in AMD EPYC processors (1st–3rd Gen) where improper access controls may allow an attacker to override DRAM performance-control tables, risking resource exhaustion. Affected components/versions are stated in AMD’s bulletin AMD-SB-1021 (AGESA mitig...

PT-2021-17015 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to improper access controls in the System Management Unit SMU, which may allow an attacker to override performance control tables located in DRAM. Th...

PT-2021-17013 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bounds checking in the System Management Unit SMU, which may cause invalid memory accesses or updates. This could result in the SMU...

PT-2021-17014 · Amd · Athlon™ Series +87

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to insufficient DRAM address validation in the System Management Unit SMU, which may cause a DMA read from an invalid DRAM address to SRAM. This can result in t...

XVader.sol : loss of user funds during 'leave' function

Handle shri4net Vulnerability details Impact Unintended Fee is charged to user while using 'leave' function in XVader.sol as part of the voting/governance. Proof of Concept Ref contracts/x-vader/XVader.sol, function leave Ref contracts/tokens/Vader.sol, function transfer Example, User locks 100...

ChopChop - ChopChop Is A CLI To Help Developers Scanning Endpoints And Identifying Exposition Of Sensitive Services/Files/Folders

ChopChop is a command-line tool for dynamic application security testing on web applications, initially written by the Michelin CERT. Its goal is to scan several endpoints and identify exposition of services/files/folders through the webroot. Checks/Signatures are declared in a config file by...

AMD System Management Unit 安全漏洞

The Advanced Micro Devices AMD System Management Unit SMU is a system management unit from Advanced Micro Devices, Inc. A security vulnerability exists in the AMD System Management Unit. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor...

AMD 多款产品缓冲区错误漏洞

AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. A buffer error vulnerability exists in...

AMD 多款产品输入验证错误漏洞

AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. An input validation error vulnerability...

AMD System Management Unit 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at AMD. An input validation error vulnerability exists in the AMD System Management Unit that stems from insufficient validation of DRAM addresses in the System Management Unit SMU, which could cause the DMA to read from an invalid DR...

AMD 多款产品输入验证错误漏洞

AMD Platform Security Processor, etc. are products of AMD USA. AMD Platform Security Processor is a security processor. AMD Secure Encrypted Virtualization is an application software. Micro Devices System Management Unit AMD SMU, etc. are products of AMD Advanced Micro Devices, Inc. in the U.S...

AMD System Management Unit 缓冲区错误漏洞

The AMD System Management Unit SMU is a system management unit of AMD Corporation. The AMD System Management Unit suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in ...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2021-2725)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-26330

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26336

Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...

CVE-2021-26338

Improper access controls in System Management Unit SMU may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources...

CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-26329

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

CVE-2021-26337

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests...

Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

Microsoft has detected exploits being used to compromise systems running the ZOHO ManageEngine ADSelfService Plus software versions vulnerable to CVE-2021-40539 in a targeted campaign. Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group...