CVE-2021-46794: AMD Ryzen™ 2000 series Desktop Processors “Raven

Описание

Оригинално описание

Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox checksum calculation triggering a data abort, resulting in a potential denial of service.

Засегнати продукти

• AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4: various
• AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4: various
• AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4: various
• AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4: Various
• AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT: various
• AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS: various
• AMD Ryzen™ Threadripper™ PRO Processors “Chagall” WS: various
• AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP: various
• AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”: various
• AMD Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5: various
• AMD Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”: various
• AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” : various
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”: various
• AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”: various

Вид слабост

• CWE-125 Четене извън границите на буфера

История

Други уязвимости в AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4

• CVE-2023-20596
• CVE-2023-20571
• 7.8CVE-2023-20563
• CVE-2022-23821
• CVE-2021-46758

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-46794
• https://nvd.nist.gov/vuln/detail/CVE-2021-46794
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001