medium4.7
CVE-2021-26347
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory tab…
Impact
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7763 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7713p Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7713 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7663 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7643 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 75f3 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7543p Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7543 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7513 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7453 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 74f3 Firmware | before milanpi-sp3_1.0.0.7 |
| Amd | Epyc 7443p Firmware | before milanpi-sp3_1.0.0.7 |