9.1
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.
Засегнати продукти
- AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4: various
- AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”: various
- AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4: various
- AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4: various
- AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4: Various
- AMD 2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”: various
- AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT: various
- AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS: various
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP: various
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”: various
- AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5: various
- AMD Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”: various
- AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” : various
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”: various
- AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”: various
- AMD 1st Gen AMD EPYC™ Processors: various
- AMD 2nd Gen AMD EPYC™ Processors: various
- AMD 3rd Gen AMD EPYC™ Processors: various
История
- 9 май 2023 Публикувано