PT-2023-12097 · Amd · 3Rd Gen Amd Epyc™+19

Published 2023-05-09 · Updated 2025-01-28 · CVE-2021-26397

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue is related to insufficient address validation. This may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations, potentially resulting in a loss of integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26397

Affected Products

3Rd Gen Amd Epyc™

Epyc 72F3 Firmware

Epyc 7313P Firmware

Epyc 7343 Firmware

Epyc 7373X Firmware

Epyc 73F3 Firmware

Epyc 7413 Firmware

Epyc 7443P Firmware

Epyc 7453 Firmware

Epyc 7473X Firmware

Epyc 74F3 Firmware

Epyc 7513 Firmware

Epyc 7543P Firmware

Epyc 7573X Firmware

Epyc 75F3 Firmware

Epyc 7643 Firmware

Epyc 7663 Firmware

Epyc 7713P Firmware

Epyc 7763 Firmware

Epyc 7773X Firmware

References · 7

• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26397 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26397 · Security Note
• https://t.me/cvenotify/108878 · Telegram Post
• https://t.me/cvenotify/50742 · Telegram Post
• https://t.me/cvenotify/50063 · Telegram Post
• https://t.me/cibsecurity/63665 · Telegram Post