Lucene search
K

368 matches found

BDU FSTEC
BDU FSTEC
added 2023/02/20 12:0 a.m.4 views

The vulnerability of the implementation of the AMD Secure Processor (ASP) microprogramming software for AMD processors allows a hacker to execute arbitrary code.

The vulnerability of the AMD Secure Processor ASP microprogramming system architecture lies in insufficient validation of input data during the execution of the SYSKEYDERIVE system call. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7.8AI score0.00212EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.3 views

SUSE CVE-2018-8932

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...

9.3CVSS9.2AI score0.01717EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.3 views

SUSE CVE-2018-8931

The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1...

9.3CVSS9.2AI score0.01717EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:14 a.m.2 views

SUSE CVE-2019-9836

Secure Encrypted Virtualization SEV on Advanced Micro Devices AMD Platform Security Processor PSP; aka AMD Secure Processor or AMD-SP 0.17 build 11 and earlier has an insecure cryptographic implementation...

4.7CVSS7AI score0.01609EPSS
Exploits1References18
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.1 views

SUSE CVE-2021-26347

Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service...

4.7CVSS7.2AI score0.00188EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2023/01/25 12:5 p.m.52 views

CVE-2021-26346

A flaw was found in hw. Failure to validate the integer operand in ASP AMD Secure Processor bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash, resulting in a potential denial of service. Mitigation Please contact AMD for more updates on this...

4.1CVSS2.6AI score0.00212EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2023/01/25 5:36 a.m.47 views

CVE-2020-12931

A flaw was found in hw. Improper parameters handling in the AMD Secure Processor ASP kernel may allow a privileged attacker to elevate their privileges, potentially leading to a loss of integrity. Mitigation Please contact AMD for more updates on this flaw...

7.5CVSS4.9AI score0.00251EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2023/01/25 5:35 a.m.40 views

CVE-2020-12930

A flaw was found in hw. Improper parameters handling in AMD Secure Processor ASP drivers may allow a privileged attacker to elevate their privileges, potentially leading to a loss of integrity. Mitigation Please contact AMD for more updates on this flaw...

7.8CVSS4.9AI score0.00251EPSS
Exploits0References4
OSV
OSV
added 2023/01/11 8:15 a.m.3 views

CVE-2021-46779

Insufficient input validation in SVCECCPRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential loss of integrity and availability...

7.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/01/11 8:15 a.m.22 views

CVE-2021-46779

Insufficient input validation in SVCECCPRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential loss of integrity and availability...

7.1CVSS6.8AI score0.00176EPSS
Exploits0References1
OSV
OSV
added 2023/01/11 8:15 a.m.3 views

CVE-2021-26396

Insufficient validation of address mapping to IO in ASP AMD Secure Processor may result in a loss of memory integrity in the SNP guest...

4.4CVSS5.8AI score0.00113EPSS
Exploits0References1
NVD
NVD
added 2023/01/11 8:15 a.m.17 views

CVE-2021-26398

Insufficient input validation in SYSKEYDERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential arbitrary code execution...

7.8CVSS7.7AI score0.00212EPSS
Exploits0References1
Prion
Prion
added 2023/01/11 8:15 a.m.25 views

Input validation

Insufficient input validation in SYSKEYDERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential arbitrary code execution...

4.3CVSS8AI score0.00212EPSS
Exploits0References1Affected Software64
Prion
Prion
added 2023/01/11 8:15 a.m.23 views

Input validation

Insufficient input validation in SVCECCPRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP AMD Secure Processor OS memory which may lead to potential loss of integrity and availability...

3.2CVSS7.1AI score0.00176EPSS
Exploits0References1Affected Software3
Prion
Prion
added 2023/01/11 8:15 a.m.18 views

Input validation

Insufficient validation of address mapping to IO in ASP AMD Secure Processor may result in a loss of memory integrity in the SNP guest...

3.2CVSS5.5AI score0.00113EPSS
Exploits0References1Affected Software24
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

AMD Secure Processor 安全漏洞

AMD Secure Encrypted Virtualization is a product of AMD Semiconductor, Inc. AMD Secure Encrypted Virtualization is a software application.AMD System Management Unit SMU is a system management unit. AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip. A security vulnerability exists in AM...

4.4CVSS5.3AI score0.00185EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.4 views

AMD Secure Processor 安全漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV, which stems from insufficient authentication of commands, which...

5.5CVSS5.7AI score0.00185EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

AMD Secure Processor 输入验证错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor. An attacker could exploit this vulnerability to cause an integer overflow, resulting in a denial of service...

5.5CVSS5.2AI score0.00212EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

AMD Secure Processor 数据伪造问题漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP that stems from insufficient validation of IO address mappings, resulting in a loss of memory integrity...

4.4CVSS5.1AI score0.00113EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.3 views

AMD Secure Processor 缓冲区错误漏洞

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. ASP AMD Secure Processor suffers from a security vulnerability that stems from insufficient boundary checking. An attacker exploits the vulnerability to write partially controlled data to the SMM or SEV-E...

7.1CVSS7.1AI score0.0018EPSS
Exploits0References2
Rows per page
Query Builder