high7.5
CVE-2021-26406
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application ca…
Impact
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7232p Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7252 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7262 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7272 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7282 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7302 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7302p Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7352 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7402 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7402p Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7452 Firmware | Version romepi_1.0.0.a |
| Amd | Epyc 7502 Firmware | Version romepi_1.0.0.a |
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001