CVE-2018-8936

Опубликовано: 22 мар. 2018

Источник: nvd

CVSS3: 9

CVSS2: 9.3

EPSS Низкий

Описание

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.

Ссылки

https://amdflaws.com/
Third Party Advisory
https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/
Third Party Advisory
https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research
Vendor Advisory
https://safefirmware.com/amdflaws_whitepaper.pdf
Third Party Advisory
https://amdflaws.com/
Third Party Advisory
https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/
Third Party Advisory
https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research
Vendor Advisory
https://safefirmware.com/amdflaws_whitepaper.pdf
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:amd:ryzen_mobile_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:amd:ryzen_mobile:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:amd:ryzen_pro_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:amd:ryzen_pro:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:amd:epyc_server_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:amd:epyc_server:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:amd:ryzen_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:amd:ryzen:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00573

Низкий

9 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vqv7-4m53-56rw

CVSS3: 9

github

больше 3 лет назад

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.

EPSS

Процентиль: 68%

0.00573

Низкий

9 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo