HIGH🇬🇧 English

CVE-2024-21980

CVSS 7.9v3.1pub. 2024-08-05upd. 2024-11-26

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

  • Amd Epyc 7203

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7203 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7203p

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7203p Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 72f3

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 72f3 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7303

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7303 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7303p

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7303p Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7313

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7313 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7313p

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7313p Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7343

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7343 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7373x

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7373x Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 73f3

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 73f3 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7413

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7413 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7443

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7443 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7443p

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7443p Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7453

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7453 Firmware

    OS
    Amd
    < milanpi_1.0.0.d

  • Amd Epyc 7473x

    HW
    Amd
    wszystkie wersje

  • Amd Epyc 7473x Firmware

    OS
    Amd
    < milanpi_1.0.0.d
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-20520CRITICAL9.8ten sam produkt

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing...

CVE-2021-46756CRITICAL9.1ten sam produkt

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow...

CVE-2021-26379CRITICAL9.8ten sam produkt

Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SM...

CVE-2021-26344HIGH7.2ten sam produkt

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker ...

CVE-2023-20578HIGH7.5ten sam produkt

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS...