agentprime: 3rd-gen-amd-epyctmEvery new CVE for 3rd-gen-amd-epyctm.https://agentprime.io/CVE-2023-20524: Out-of-bounds write in 2nd Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2023-20524/https://agentprime.io/advisories/CVE-2023-20524/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:29 GMTCVECVE-2023-20520: Out-of-bounds write in 1st Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2023-20520/https://agentprime.io/advisories/CVE-2023-20520/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:29 GMTCVEcriticalCVE-2022-23818: Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity.https://agentprime.io/advisories/CVE-2022-23818/https://agentprime.io/advisories/CVE-2022-23818/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:28 GMTCVECVE-2021-46775: Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution.https://agentprime.io/advisories/CVE-2021-46775/https://agentprime.io/advisories/CVE-2021-46775/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:26 GMTCVECVE-2021-46769: Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.https://agentprime.io/advisories/CVE-2021-46769/https://agentprime.io/advisories/CVE-2021-46769/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:25 GMTCVECVE-2021-46764: Out-of-bounds write in 2nd Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-46764/https://agentprime.io/advisories/CVE-2021-46764/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:24 GMTCVECVE-2021-46763: Out-of-bounds write in 2nd Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-46763/https://agentprime.io/advisories/CVE-2021-46763/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:23 GMTCVECVE-2021-46762: Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service.https://agentprime.io/advisories/CVE-2021-46762/https://agentprime.io/advisories/CVE-2021-46762/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:23 GMTCVECVE-2021-26397: Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability.https://agentprime.io/advisories/CVE-2021-26397/https://agentprime.io/advisories/CVE-2021-26397/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:19 GMTCVECVE-2021-26379: Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.https://agentprime.io/advisories/CVE-2021-26379/https://agentprime.io/advisories/CVE-2021-26379/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 May 2023 18:36:18 GMTCVEcriticalCVE-2021-46771: Improper input validation in 3rd Gen AMD EPYC™https://agentprime.io/advisories/CVE-2021-46771/https://agentprime.io/advisories/CVE-2021-46771/Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 18:30:03 GMTCVECVE-2021-26324: A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.https://agentprime.io/advisories/CVE-2021-26324/https://agentprime.io/advisories/CVE-2021-26324/Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 18:27:30 GMTCVECVE-2021-26332: Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.https://agentprime.io/advisories/CVE-2021-26332/https://agentprime.io/advisories/CVE-2021-26332/Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 18:26:52 GMTCVECVE-2021-26370: Improper input validation in 2nd Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-26370/https://agentprime.io/advisories/CVE-2021-26370/Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 18:25:17 GMTCVECVE-2021-26325: Improper input validation in 3rd Gen AMD EPYC™https://agentprime.io/advisories/CVE-2021-26325/https://agentprime.io/advisories/CVE-2021-26325/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:23:15 GMTCVECVE-2021-26330: Heap-based buffer overflow in 1st Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-26330/https://agentprime.io/advisories/CVE-2021-26330/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:19:29 GMTCVECVE-2021-26327: Improper input validation in 3rd Gen AMD EPYC™https://agentprime.io/advisories/CVE-2021-26327/https://agentprime.io/advisories/CVE-2021-26327/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:18:25 GMTCVECVE-2021-26323: Improper input validation in 3rd Gen AMD EPYC™https://agentprime.io/advisories/CVE-2021-26323/https://agentprime.io/advisories/CVE-2021-26323/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:14:43 GMTCVECVE-2020-12961: Improper input validation in 2nd Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2020-12961/https://agentprime.io/advisories/CVE-2020-12961/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:13:39 GMTCVECVE-2021-26315: Insufficient verification of data authenticity in 3rd Gen AMD EPYC™https://agentprime.io/advisories/CVE-2021-26315/https://agentprime.io/advisories/CVE-2021-26315/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:12:07 GMTCVECVE-2020-12954: Protection mechanism failure in 1st Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2020-12954/https://agentprime.io/advisories/CVE-2020-12954/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:11:02 GMTCVECVE-2021-26331: Improper input validation in 1st Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-26331/https://agentprime.io/advisories/CVE-2021-26331/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:09:35 GMTCVECVE-2021-26321: Improper input validation in 1st Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-26321/https://agentprime.io/advisories/CVE-2021-26321/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:07:26 GMTCVECVE-2021-26320: Improper certificate validation in 1st Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-26320/https://agentprime.io/advisories/CVE-2021-26320/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 18:05:10 GMTCVECVE-2021-26322: Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.https://agentprime.io/advisories/CVE-2021-26322/https://agentprime.io/advisories/CVE-2021-26322/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 17:58:40 GMTCVECVE-2021-26329: AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.https://agentprime.io/advisories/CVE-2021-26329/https://agentprime.io/advisories/CVE-2021-26329/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 17:57:01 GMTCVECVE-2021-26338: Improper access control in 2nd Gen AMD EPYC™ and othershttps://agentprime.io/advisories/CVE-2021-26338/https://agentprime.io/advisories/CVE-2021-26338/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 17:53:50 GMTCVECVE-2021-26326: Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.https://agentprime.io/advisories/CVE-2021-26326/https://agentprime.io/advisories/CVE-2021-26326/Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Nov 2021 17:52:14 GMTCVE