medium6.1
CVE-2023-20533
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting…
Impact
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7232p Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7252 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7262 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7272 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7282 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7302 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7302p Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7352 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7402 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7402p Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7452 Firmware | before romepi_1.0.0.d |
| Amd | Epyc 7502 Firmware | before romepi_1.0.0.d |
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001