epyc_7451 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/epyc_7451/ Sun, 26 Feb 2023 06:36:46 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png epyc_7451 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/epyc_7451/ 32 32 CVE-2020-12944 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12944/ Sun, 26 Feb 2023 06:36:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12944/ Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

The post CVE-2020-12944 appeared first on CVE Vulnerability.

]]> Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

The post CVE-2020-12944 appeared first on CVE Vulnerability.

]]> CVE-2020-12954 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12954/ Sun, 26 Feb 2023 06:36:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12954/ A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.

The post CVE-2020-12954 appeared first on CVE Vulnerability.

]]> A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.

The post CVE-2020-12954 appeared first on CVE Vulnerability.

]]> CVE-2020-12966 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12966/ Sun, 26 Feb 2023 06:36:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12966/ AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

The post CVE-2020-12966 appeared first on CVE Vulnerability.

]]> AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

The post CVE-2020-12966 appeared first on CVE Vulnerability.

]]> CVE-2021-46744 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-46744/ Thu, 23 Feb 2023 14:13:12 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-46744/ An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.

The post CVE-2021-46744 appeared first on CVE Vulnerability.

]]> An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.

The post CVE-2021-46744 appeared first on CVE Vulnerability.

]]> CVE-2021-46778 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-46778/ Thu, 23 Feb 2023 14:13:12 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-46778/ Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

The post CVE-2021-46778 appeared first on CVE Vulnerability.

]]> Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

The post CVE-2021-46778 appeared first on CVE Vulnerability.

]]> CVE-2021-26398 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26398/ Thu, 23 Feb 2023 14:08:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26398/ Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.

The post CVE-2021-26398 appeared first on CVE Vulnerability.

]]> Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.

The post CVE-2021-26398 appeared first on CVE Vulnerability.

]]> CVE-2021-26403 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26403/ Thu, 23 Feb 2023 14:08:20 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26403/ Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

The post CVE-2021-26403 appeared first on CVE Vulnerability.

]]> Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

The post CVE-2021-26403 appeared first on CVE Vulnerability.

]]> CVE-2021-26322 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26322/ Thu, 23 Feb 2023 14:08:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26322/ Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

The post CVE-2021-26322 appeared first on CVE Vulnerability.

]]> Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

The post CVE-2021-26322 appeared first on CVE Vulnerability.

]]> CVE-2021-26341 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26341/ Thu, 23 Feb 2023 14:08:19 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26341/ Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.

The post CVE-2021-26341 appeared first on CVE Vulnerability.

]]> Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.

The post CVE-2021-26341 appeared first on CVE Vulnerability.

]]> CVE-2022-29900 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-29900/ Thu, 23 Feb 2023 05:18:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-29900/ Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

The post CVE-2022-29900 appeared first on CVE Vulnerability.

]]> Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

The post CVE-2022-29900 appeared first on CVE Vulnerability.

]]>