DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
AMD Prozessoren: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-05-10
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessoren ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
01
beschreibt (52)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20559US | high8.8 | — | ||
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
| ||||
| CVE-2023-20558US | high8.8 | — | ||
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
| ||||
| CVE-2020-12931US | high7.8 | — | ||
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity. | ||||
| CVE-2021-26384US | high7.8 | — | ||
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory re… | ||||
| CVE-2021-26386US | high7.8 | — | ||
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code executio… | ||||
| CVE-2021-26368US | medium4.4OT erhöht | — | ||
Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged… | ||||
| CVE-2021-26363US | medium4.4 | — | ||
A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data ex… | ||||
| CVE-2021-26317US | high7.8 | — | ||
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution. | ||||
| CVE-2021-26369US | high7.8 | — | ||
A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses. | ||||
| CVE-2021-26366US | high7.1 | — | ||
An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity. | ||||
| CVE-2021-26362US | high7.1 | — | ||
A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers lead… | ||||
| CVE-2021-26361US | medium5.5 | — | ||
A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory from the ASP stage 2 bootloader potentiall… | ||||
| CVE-2021-26351US | medium5.5 | — | ||
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial… | ||||
| CVE-2022-21151US | medium5.5 | — | ||
Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure v… | ||||
| CVE-2022-0005US | low2.4OT erhöht | — | ||
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclo… | ||||
| CVE-2021-33124US | medium6.7 | — | ||
Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. | ||||
| CVE-2021-33123US | high7.8 | — | ||
Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local acce… | ||||
| CVE-2021-33122US | high7.8 | — | ||
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. | ||||
| CVE-2021-33117US | medium5.5 | — | ||
Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosur… | ||||
| CVE-2021-33103US | medium6.7 | — | ||
Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local acce… | ||||
20 von 52 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Amazon Linux Security Advisory ALAS2-2022-1800 vom 2022-06-07external
- Amazon Linux Security Advisory ALAS-2022-070 vom 2022-05-20external
- Amazon Linux Security Advisory ALAS-2022-1606 vom 2022-07-07external
- openSUSE Security Update OPENSUSE-SU-2025:14804-1 vom 2025-02-14external
- openSUSE Security Update OPENSUSE-SU-2025:14787-1 vom 2025-02-13external
- openSUSE Security Update OPENSUSE-SU-2025:14775-1 vom 2025-02-13external
- openSUSE Security Update OPENSUSE-SU-2025:14796-1 vom 2025-02-13external
- openSUSE Security Update OPENSUSE-SU-2025:14777-1 vom 2025-02-13external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan