Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p57x-q6x3-v235

Опубликовано: 09 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

EPSS

Процентиль: 35%
0.00144
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.1
nvd
больше 2 лет назад

Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.

EPSS

Процентиль: 35%
0.00144
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-20