DeutschShown in its original language — a full translation is planned for a future version.
AMD Prozessor: Mehrere Schwachstellen
view advisory published 2023-11-14
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.
01
describes (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20596US | critical9.8 | — | ||
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
| ||||
| CVE-2023-20592US | medium6.5 | — | ||
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leadi… | ||||
| CVE-2023-20571US | high8.1 | — | ||
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.… | ||||
| CVE-2023-20566US | high7.5 | — | ||
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. | ||||
| CVE-2023-20565US | high7.8 | — | ||
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
| ||||
| CVE-2023-20563US | high7.8 | — | ||
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
| ||||
| CVE-2023-20533US | high7.5 | — | ||
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service… | ||||
| CVE-2023-20526US | medium4.6 | — | ||
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of conf… | ||||
| CVE-2023-20521US | medium5.7 | — | ||
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentia… | ||||
| CVE-2023-20519US | low3.3 | — | ||
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential… | ||||
| CVE-2022-23830US | medium5.3 | — | ||
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity. | ||||
| CVE-2022-23821US | critical9.8 | — | ||
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
| ||||
| CVE-2022-23820US | critical9.8 | — | ||
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution. | ||||
| CVE-2021-46774US | high7.5 | — | ||
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service… | ||||
| CVE-2021-46766US | medium5.5 | — | ||
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality. | ||||
| CVE-2021-46758US | medium6.1 | — | ||
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a pote… | ||||
| CVE-2021-26345US | medium4.9 | — | ||
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of servi… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:0753 vom 2024-02-08external
- Red Hat Security Advisory RHSA-2024:0978 vom 2024-02-26external
- Red Hat Security Advisory RHSA-2024:0979 vom 2024-02-26external
- RedHat Security Advisoryexternal
- Red Hat Security Advisory RHSA-2024:3178 vom 2024-05-22external
- Red Hat Security Advisory RHSA-2024:4575 vom 2024-07-17external
- Oracle Linux Security Advisory ELSA-2024-3178 vom 2024-05-28external
- CentOS Security Advisory CESA-2024:0753 vom 2024-02-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan