SUSE CVE-2018-8930

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

AMD EPYC Server File Write Vulnerability

AMD EPYC Server is a server central processing unit CPU data processing chip from AMD. A security vulnerability exists in AMD EPYC Server, which arises from a program that has difficulty enforcing full access control over protected memory areas. The vulnerability can be exploited by an attacker t...

CVE-2018-8930: Undefined Security Weakness

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3...

CVE-2018-8933: Incorrect Permission Assignment for Critical Resource

The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3...

PT-2018-18728

Name of the Vulnerable Software and Affected Versions AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips affected versions not specified Description The issue allows for Platform Security Processor PSP privilege escalation in the affected processor chips. Recommendations At the...

CVE-2018-8936: Undefined Security Weakness

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...

PT-2018-1088

Name of the Vulnerable Software and Affected Versions AMD EPYC Server processor affected versions not specified Description The issue is related to the implementation of the AMD Secure Processor technology in the AMD EPYC Server processor, specifically with the bootloader responsible for checking...