AMD Secure Processor 输入验证错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from AMD. An input validation error vulnerability exists in multiple AMD products that stems from incorrect input and range checking in the Platform Secure Processor PSP bootloader image header that could allow an attacker to use...

AMD Secure Processor输入验证错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from AMD. An input validation error vulnerability exists in AMD Secure Processor, which stems from the ASP firmware's insufficient validation of the length of the BIOS image could lead to arbitrary code execution...

PT-2021-23017 · Kvm +6 · Kvm +6

Name of the Vulnerable Software and Affected Versions: KVM affected versions not specified Description: A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host...

Ubuntu: Security Advisory (USN-5140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0507 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.78 and fixes at least the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability CVE-2021-3760. A flaw in the SCTP stack where a blind attacker may be able ...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.78 and fixes at least the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability CVE-2021-3760. A flaw in the SCTP stack where a blind attacker may be...

USN-5140-1 linux-oem-5.14 vulnerabilities

It was discovered that the AMD Cryptographic Coprocessor CCP driver in the Linux kernel did not properly deallocate memory in some error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3744, CVE-2021-3764 It was discovered that an integer...

USN-5140-1: Linux kernel (OEM 5.14) vulnerabilities

It was discovered that the AMD Cryptographic Coprocessor CCP driver in the Linux kernel did not properly deallocate memory in some error conditions. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3744, CVE-2021-3764 It was discovered that an integer...

USN-5139-1: Linux kernel (OEM 5.10) vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

[SECURITY] Fedora 34 Update: radeontop-1.3.post4-4g1552170.fc34

RadeonTop is a monitoring utility for AMD Radeon cards from R600 and up...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2713)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypa...

AMD Graphics Driver 信息泄露漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from an information disclosure vulnerability that can be exploited by attackers to cause a KASLR bypass...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. A security vulnerability exists in AMD Graphics Driver for Windows 10, which can be exploited by unprivileged attackers to cause an escalation of privileges and a denial of service...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

CVE-2021-26334

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user...

CVE-2021-26335

Improper input and range checking in the AMD Secure Processor ASP boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution...

PT-2021-8203 · Amd +1 · Amd Μprof +1

Name of the Vulnerable Software and Affected Versions: AMD μProf tool affected versions not specified Description: The AMDPowerProfiler.sys driver of the AMD μProf tool may allow lower privileged users to access MSRs in the kernel, which may lead to privilege escalation and ring-0 code execution ...

AMD® Graphics Driver November 2021 Security Updates

AMD has informed HP of potential security vulnerabilities identified in the AMD® Graphics Driver for Windows 10 which may allow escalation of privilege, denial of service, or information disclosure. AMD has released updates to mitigate the potential vulnerabilities. HP has identified affected...