7.8

CVE-2021-26326

Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amd ≫ Epyc 7232p Firmware Version < romepi-sp3_1.0.0.c
   Amd ≫ Epyc 7232p Version -
Amd ≫ Epyc 7763 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7763 Version -
Amd ≫ Epyc 7713p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7713p Version -
Amd ≫ Epyc 7713 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7713 Version -
Amd ≫ Epyc 7663 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7663 Version -
Amd ≫ Epyc 7643 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7643 Version -
Amd ≫ Epyc 75f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 75f3 Version -
Amd ≫ Epyc 7543p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7543p Version -
Amd ≫ Epyc 7543 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7543 Version -
Amd ≫ Epyc 7513 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7513 Version -
Amd ≫ Epyc 7453 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7453 Version -
Amd ≫ Epyc 74f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 74f3 Version -
Amd ≫ Epyc 7443p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7443p Version -
Amd ≫ Epyc 7443 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7443 Version -
Amd ≫ Epyc 7413 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7413 Version -
Amd ≫ Epyc 73f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 73f3 Version -
Amd ≫ Epyc 7343 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7343 Version -
Amd ≫ Epyc 7313p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7313p Version -
Amd ≫ Epyc 7313 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7313 Version -
Amd ≫ Epyc 72f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 72f3 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.163
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
Vendor Advisory