Skip to main content

Epyc 7763 Firmware CVE-2021-26337

MEDIUM
2021-11-16 psirt@amd.com
Information Disclosure Amd Epyc 7763 Firmware Epyc 7713P Firmware Epyc 7713 Firmware Epyc 7663 Firmware Epyc 7643 Firmware Epyc 75F3 Firmware Epyc 7543P Firmware Epyc 7543 Firmware Epyc 7513 Firmware Epyc 7453 Firmware Epyc 74F3 Firmware Epyc 7443P Firmware Epyc 7443 Firmware Epyc 7413 Firmware Epyc 73F3 Firmware Epyc 7343 Firmware Epyc 7313P Firmware Epyc 7313 Firmware Epyc 72F3 Firmware Ryzen Threadripper Pro 5995Wx Firmware Ryzen Threadripper Pro 5965Wx Firmware Ryzen Threadripper Pro 5955Wx Firmware Ryzen Threadripper Pro 5945Wx Firmware Ryzen Threadripper 2990Wx Firmware Ryzen Threadripper 2970Wx Firmware Ryzen Threadripper 2950X Firmware Ryzen Threadripper 2920X Firmware Ryzen Threadripper 3960X Firmware Ryzen Threadripper 3970X Firmware Ryzen Threadripper 3990X Firmware Ryzen 3 3100 Firmware Ryzen 3 3300X Firmware Ryzen 5 3600 Firmware Ryzen 5 3600X Firmware Ryzen 7 3700X Firmware Ryzen 7 3800X Firmware Ryzen 9 3900X Firmware Ryzen 9 3950X Firmware Ryzen 9 5980Hx Firmware Ryzen 9 5980Hs Firmware Ryzen 9 5900Hx Firmware Ryzen 9 5900Hs Firmware Ryzen 7 5800H Firmware Ryzen 7 5800Hs Firmware Ryzen 7 5825U Firmware Ryzen 7 5800U Firmware Ryzen 5 5600H Firmware Ryzen 5 5600Hs Firmware Ryzen 5 5625U Firmware Ryzen 5 5600U Firmware Ryzen 3 5425U Firmware Ryzen 3 5400U Firmware Epyc 7232P Firmware Epyc 7302P Firmware Epyc 7402P Firmware Epyc 7502P Firmware Epyc 7702P Firmware Epyc 7252 Firmware Epyc 7262 Firmware Epyc 7272 Firmware Epyc 7282 Firmware Epyc 7302 Firmware Epyc 7352 Firmware Epyc 7402 Firmware Epyc 7452 Firmware Epyc 7502 Firmware Epyc 7532 Firmware Epyc 7542 Firmware Epyc 7552 Firmware Epyc 7642 Firmware Epyc 7662 Firmware Epyc 7702 Firmware Epyc 7742 Firmware Epyc 7F32 Firmware Epyc 7F52 Firmware Epyc 7F72 Firmware Epyc 7002 Firmware Epyc 7003 Firmware Ryzen 3 3300G Firmware Ryzen 5 3400G Firmware Ryzen 5 3450G Firmware Ryzen Threadripper Pro 3945Wx Firmware Ryzen Threadripper Pro 3955Wx Firmware Ryzen Threadripper Pro 3975Wx Firmware Ryzen Threadripper Pro 3995Wx Firmware Ryzen Threadripper Pro 5975Wx Firmware Ryzen 5 5600X Firmware Ryzen 5300G Firmware Ryzen 5300Ge Firmware Ryzen 5600G Firmware Ryzen 5600Ge Firmware Ryzen 5600X Firmware Ryzen 5700G Firmware Ryzen 5700Ge Firmware Ryzen 5800X Firmware Ryzen 5800X3D Firmware Ryzen 5900X Firmware Ryzen 5950X Firmware Ryzen Pro 5350G Firmware Ryzen Pro 5350Ge Firmware Ryzen Pro 5650G Firmware Ryzen Pro 5650Ge Firmware Ryzen Pro 5750G Firmware Ryzen Pro 5750Ge Firmware Ryzen Pro 3200G Firmware Ryzen Pro 3200Ge Firmware Ryzen Pro 3350G Firmware Ryzen Pro 3400G Firmware Ryzen Pro 3400Ge Firmware Ryzen Pro 3600 Firmware Ryzen Pro 3700 Firmware Ryzen Pro 3900 Firmware
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 16, 2021 - 19:15 nvd
MEDIUM 5.5

DescriptionNVD

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.

AnalysisAI

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests. Affected products include: Amd Epyc 7003 Firmware, Amd Epyc 7002 Firmware, Amd Epyc 72F3 Firmware, Amd Epyc 7313 Firmware, Amd Epyc 7313P Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2023-20520 CRITICAL
9.8 May 09

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-b

CVE-2023-20569 MEDIUM POC
4.7 Aug 08

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. R

CVE-2021-26340 HIGH
8.4 Dec 10

A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to fl

CVE-2024-21980 HIGH
7.9 Aug 05

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a g

CVE-2024-21978 HIGH
7.9 Aug 05

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially le

CVE-2021-26335 HIGH
7.8 Nov 16

Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to us

CVE-2021-26331 HIGH
7.8 Nov 16

AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox ent

CVE-2021-26323 HIGH
7.8 Nov 16

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. Rated high se

CVE-2021-26315 HIGH
7.8 Nov 16

When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,

CVE-2021-26326 HIGH
7.8 Nov 16

Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. Rated high severity (CVSS 7.8)

CVE-2023-20566 HIGH
7.5 Nov 14

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integri

CVE-2023-20533 HIGH
7.5 Nov 14

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inva

Share

CVE-2021-26337 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy