medium5.5
CVE-2021-26388
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, result…
Impact
Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memory contents, resulting in a potential denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7232p Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7302p Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7402p Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7502p Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7702p Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7252 Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7262 Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7272 Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7282 Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7302 Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7352 Firmware | before romepi-sp3_1.0.0.d |
| Amd | Epyc 7402 Firmware | before romepi-sp3_1.0.0.d |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028