CVE-2021-46755
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
Failure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker
with a malicious bootloader to exhaust the SysHub resources resulting in a
potential denial of service.
Affected (46)
Products: Amd: Ryzen 5500 Firmware, Ryzen 5600 Firmware, Ryzen 5600g Firmware, Ryzen 5600x Firmware, Ryzen 5700g Firmware, Ryzen 5700x Firmware, Ryzen 5800x3d Firmware, Ryzen 5800x Firmware, Ryzen 5900x Firmware, Ryzen 5950x Firmware, Ryzen 3100 Firmware, Ryzen 3300x Firmware, Ryzen 3500 Firmware, Ryzen 3500x Firmware, Ryzen 3600 Firmware, Ryzen 3600x Firmware, Ryzen 3600xt Firmware, Ryzen 3800x Firmware, Ryzen 3800xt Firmware, Ryzen 3900 Firmware, Ryzen 3900x Firmware, Ryzen 3900xt Firmware, Ryzen 3950x Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5500 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600g | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5600x | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700g | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5700x | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800x3d | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5800x | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5900x | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4v2_pi_1.2.0.6 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 5950x | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3100 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3300x | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3500 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3500x | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600x | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3600xt | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3800x | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3800xt | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900x | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3900xt | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4_v2_pi_1.2.0.8 |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version comboam4pi_1.0.0.9 |
| Running on/with | Platform Versions |
|---|---|
Amd Ryzen 3950x | All versions |
References (2)
Source: psirt@amd.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.