7725 matches found
Design/Logic Flaw
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality...
Code injection
A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigations...
Input validation
Insufficient validation of the IOCTL Input Output Control input buffer in AMD ?Prof may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...
Information disclosure
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled?address, potentially leading to information disclosure...
Input validation
Insufficient validation of the IOCTL Input Output Control input buffer in AMD ?Prof may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service...
CVE-2023-20564
Insufficient validation in the IOCTL Input Output Control input buffer in AMD RyzenTM Master may permit a privileged attacker to perform memory reads and writes, potentially leading to a loss of confidentiality or arbitrary kernel execution. Mitigation Please contact AMD support for updates...
CVE-2023-20560
Insufficient validation of the IOCTL Input Output Control input buffer in AMD RyzenTM Master may allow a privileged attacker to provide a null value, potentially resulting in a Windows crash, leading to denial of service. Mitigation Please contact AMD support for updates...
CVE-2023-20562
Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver, potentially leading to arbitrary kernel execution. Mitigation Please contact AMD support for updates...
CVE-2023-20561
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address, potentially resulting in a Windows crash, leading to a denial of service. Mitigation Please contact AMD support for updates...
CVE-2023-20556
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer, potentially resulting in a Windows crash, leading to denial of service. Mitigation Please contact AMD support for updates...
CVE-2023-20561
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...
CVE-2023-20561
CVE-2023-20561 describes insufficient validation of the IOCTL input buffer in AMD μProf, enabling an authenticated user to send an arbitrary address that may crash Windows and cause denial of service. The issue is tied to the AMD μProf tool across Windows/Linux/FreeBSD with impact described as Do...
CVE-2023-20561
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...
CVE-2023-20556
CVE-2023-20556 involves AMD μProf. The issue is insufficient validation of the IOCTL input buffer, which could allow an authenticated user to send an arbitrary buffer and cause a Windows crash, leading to a denial of service (DoS). AMD’s bulletin AMD-SB-7003 confirms affected product is AMD μProf...
CVE-2023-20556
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service...
CVE-2023-20556
Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service...
CVE-2023-20562
Insufficient validation in the IOCTL Input Output Control input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution...
CVE-2023-20562
CVE-2023-20562 involves AMD μProf (AMD uProf) where there is insufficient validation in the IOCTL input buffer. The impact described across sources is that an authenticated user may load an unsigned driver, potentially enabling arbitrary kernel execution. Connected materials explicitly discuss ex...
Citrix Hypervisor Security Bulletin for CVE-2023-20569, CVE-2023-34319 and CVE-2022-40982
Description of Problem An issue has been discovered in Citrix Hypervisor 8.2 CU1 LTSR that may allow malicious, privileged code in a guest VM to cause the host to crash. This issue has the following identifier: CVE-2023-34319 In addition, Intel has disclosed a security issue affecting certain Int...