CVE-2017-7262

EPSS 0.06%
Published 25.03.2017 00:59:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.

Affected products Warnungen 0 Metrics 3 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Amd ≫ Ryzen Version <= 2017-01-27

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.148

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://forum.hwbot.org/showpost.php?p=480524

Third Party Advisory

http://forum.hwbot.org/showthread.php?t=167605

Third Party Advisory

http://www.securityfocus.com/bid/97098

Third Party Advisory

VDB Entry

https://news.ycombinator.com/item?id=13924192

Third Party Advisory

https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-7262

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-7262

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-7262

EUVD