PT-2023-1408 · Amd · Amd Secure Processor

CVE-2021-26396 · Publicado 2023-01-10 · Atualizado 2023-01-18

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AMD Secure Processor (affected versions not specified)

Description The issue is related to insufficient validation of address mapping to IO in the AMD Secure Processor, which may result in a loss of memory integrity in the SNP guest. This could potentially allow a remote attacker to impact the integrity of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

RCE

Enumeração de Fraquezas

CWE-345

CWE-20

Identificadores relacionados

BDU:2023-00789

CVE-2021-26396

Produtos afetados

Amd Secure Processor

Referências · 6

• https://bdu.fstec.ru/vul/2023-00789 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2021-26396 · Nota de Segurança
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2021-26396 · Aviso do Fabricante
• https://support.lenovo.com/us/en/product_security/LEN-87730 · Nota
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1032 · Nota