CVE-2021-26336: Improper Restriction of Operations within the Bounds of a Memory Buffer

Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...

CVE-2021-26330: Heap-based Buffer Overflow

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

CVE-2021-26337: Undefined Security Weakness

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests...

PT-2021-17009

Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided, potentially resulting in a loss of resources. Recommendations ...

PT-2021-17011

Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The issue allows a malicious user to manipulate mailbox entries, potentially leading to arbitrary code execution. Recommendations At the moment, there is no information...

CVE-2021-26331: Improper Input Validation

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

PT-2021-17010

Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The AMD System Management Unit SMU may experience a heap-based overflow, which may result in a loss of resources. Recommendations At the moment, there is no information...

AMD Server Vulnerabilities – November 2021

Bulletin ID: AMD-SB-1021 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary During security reviews in collaboration with Google, Microsoft, and Oracle, potential vulnerabilities in the AMD Secure Processor ASP, AMD System Management Un...

Race condition

A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service DoS condition. The...

smu.edu.sg XSS vulnerability

Vulnerable URL: http://www.smu.edu.sg/directory/faculty/facultySchool.asp?lname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 09.12.2015 Latest check for patch:| 09.12.2015 07:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability Advisory ID: cisco-sa-20110720-asr9k Revision 1.0 For Public Release 2011 July 20 1600 UTC GMT...

Cisco Security Advisory: Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability Advisory ID: cisco-sa-20110525-iosxrspa Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS XR Software IP Packet Vulnerability Advisory ID: cisco-sa-20110525-iosxr Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT +--------------------------------------------------------- Summary ======= Cisco IOS...