low1.9
CVE-2021-26345
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting…
Impact
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7h12 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7f72 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7f52 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7f32 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7742 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7702p Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7702 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7662 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7642 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7552 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7542 Firmware | before romepi_1.0.0.f |
| Amd | Epyc 7532 Firmware | before romepi_1.0.0.f |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001