Към съдържанието

CVE-2024-21971: AMD Ryzen™ 5000 Series Desktop Processors, заобикаляне

5.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.

Засегнати продукти

  • AMD AMD Ryzen™ 5000 Series Desktop Processors: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (24.10.20)
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 7000 Series Desktop Processors: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 7030 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Ryzen™ 7045 Series Mobile Processors: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ RX 7000 Series Graphics Products: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ PRO W7000 Series Graphics Products: AMD Software: Adrenalin Edition 24.7.1 (24.10.29.01); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 24.7.1 (23.19.16); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ PRO VII: AMD Software: Adrenalin Edition 24.7.1 (23.19.16); AMD Software: PRO Edition 24.Q2 (23.19.16.01)
  • AMD AMD Radeon™ Instinct™ MI25: Contact your AMD Customer Engineering representative
  • AMD AMD Radeon™ PRO V520: Contact your AMD Customer Engineering representative
  • AMD AMD Radeon™ PRO V620: Contact your AMD Customer Engineering representative
  • AMD AMD Radeon™ PRO V710: Contact your AMD Customer Engineering representative
  • AMD AMD Ryzen™ Embedded R1000: 24.10.21.01; 23.19.16
  • AMD AMD Ryzen™ Embedded R2000: 24.10.21.01; 23.19.16
  • AMD AMD Ryzen™ Embedded 7000: 24.10.21.01; 23.19.16
  • AMD AMD Ryzen™ Embedded V1000: 24.10.21.01; 23.19.16
  • AMD AMD Ryzen™ Embedded V2000: 24.10.21.01; 23.19.16
  • AMD AMD Ryzen™ Embedded V3000: 24.10.21.01; 23.19.16

Вид слабост

История

  • 12 февруари 2025 Публикувано

Други уязвимости в AMD AMD Ryzen™ 5000 Series Desktop Processors

Първоизточници

CVE-2024-21971: AMD Ryzen™ 5000 Series Desktop Processors, заобикаляне | freedomonline.bg