CVSS: 9.3EPSS: 0%CPEs: 8EXPL: 0CVE-2018-8930
https://notcve.org/view.php?id=CVE-2018-8930
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3. Los chips de procesamiento de AMD EPYC Server, Ryzen, Ryzen Pro y Ryzen Mobile no aplican Hardware Validated Boot lo suficiente. Esto también se conoce como MASTERKEY-1, MASTERKEY-2 y MASTERKEY-3. • https://amdflaws.com https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research https://safefirmware.com/amdflaws_whitepaper.pdf https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us •
CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0CVE-2018-8932
https://notcve.org/view.php?id=CVE-2018-8932
The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4. Los chips de procesamiento de AMD Ryzen y Ryzen Pro tienen un control de acceso insuficiente para Secure Processor. Esto se conoce como RYZENFALL-2, RYZENFALL-3 y RYZENFALL-4. • https://amdflaws.com https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research https://safefirmware.com/amdflaws_whitepaper.pdf • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-7262
https://notcve.org/view.php?id=CVE-2017-7262
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite. El procesador AMD Ryzen con microcódigo AGESA hasta 2017-01-27 permite a los usuarios locales provocar una denegación de servicio (cuelgue del sistema) a través de una aplicación que realiza una larga serie de instrucciones FMA3, como lo demuestra el banco de pruebas Flops. • http://forum.hwbot.org/showpost.php?p=480524 http://forum.hwbot.org/showthread.php?t=167605 http://www.securityfocus.com/bid/97098 https://news.ycombinator.com/item?id=13924192 https://www.techpowerup.com/231536/amd-ryzen-machine-crashes-to-a-sequence-of-fma3-instructions • CWE-20: Improper Input Validation •