medium6.5
CVE-2023-20525
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially …
Impact
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7h12 Firmware | before romepi_100d |
| Amd | Epyc 7f72 Firmware | before romepi_100d |
| Amd | Epyc 7f52 Firmware | before romepi_100d |
| Amd | Epyc 7f32 Firmware | before romepi_100d |
| Amd | Epyc 7742 Firmware | before romepi_100d |
| Amd | Epyc 7702p Firmware | before romepi_100d |
| Amd | Epyc 7702 Firmware | before romepi_100d |
| Amd | Epyc 7662 Firmware | before romepi_100d |
| Amd | Epyc 7642 Firmware | before romepi_100d |
| Amd | Epyc 7552 Firmware | before romepi_100d |
| Amd | Epyc 7542 Firmware | before romepi_100d |
| Amd | Epyc 7532 Firmware | before romepi_100d |