Lucene search

K
cveAMDCVE-2021-46774
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2021-46774

2023-11-1419:15:10
AMD
web.nvd.nist.gov
28
cve-2021-46774
insufficient dram validation
smu
denial of service
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

21.2%

Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.

Affected configurations

Nvd
Node
amdepyc_7001_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7001Match-
Node
amdepyc_7251_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7251Match-
Node
amdepyc_7261_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7261Match-
Node
amdepyc_7281_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7281Match-
Node
amdepyc_7301_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7301Match-
Node
amdepyc_7351_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7351Match-
Node
amdepyc_7351p_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7351pMatch-
Node
amdepyc_7371_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7371Match-
Node
amdepyc_7401_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7401Match-
Node
amdepyc_7401p_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7401pMatch-
Node
amdepyc_7451_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7451Match-
Node
amdepyc_7501_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7501Match-
Node
amdepyc_7551_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7551Match-
Node
amdepyc_7551p_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7551pMatch-
Node
amdepyc_7601_firmwareRange<naplespi_1.0.0.k
AND
amdepyc_7601Match-
Node
amdepyc_7232p_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7232pMatch-
Node
amdepyc_7252_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7252Match-
Node
amdepyc_7262_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7262Match-
Node
amdepyc_7272_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7272Match-
Node
amdepyc_7282_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7282Match-
Node
amdepyc_7302_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7302Match-
Node
amdepyc_7302p_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7302pMatch-
Node
amdepyc_7352_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7352Match-
Node
amdepyc_7402_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7402Match-
Node
amdepyc_7402p_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7402pMatch-
Node
amdepyc_7452_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7452Match-
Node
amdepyc_7502_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7502Match-
Node
amdepyc_7502p_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7502pMatch-
Node
amdepyc_7532_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7532Match-
Node
amdepyc_7542_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7542Match-
Node
amdepyc_7552_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7552Match-
Node
amdepyc_7642_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7642Match-
Node
amdepyc_7662_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7662Match-
Node
amdepyc_7702_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7702Match-
Node
amdepyc_7702p_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7702pMatch-
Node
amdepyc_7742_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7742Match-
Node
amdepyc_7f32_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7f32Match-
Node
amdepyc_7f52_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7f52Match-
Node
amdepyc_7f72_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7f72Match-
Node
amdepyc_7h12_firmwareRange<romepi_1.0.0.g
AND
amdepyc_7h12Match-
Node
amdepyc_7763_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7763Match-
Node
amdepyc_7713p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7713pMatch-
Node
amdepyc_7713_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7713Match-
Node
amdepyc_7663p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7663pMatch-
Node
amdepyc_7663_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7663Match-
Node
amdepyc_7643p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7643pMatch-
Node
amdepyc_7773x_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7773xMatch-
Node
amdepyc_7643_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7643Match-
Node
amdepyc_7573x_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7573xMatch-
Node
amdepyc_75f3_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_75f3Match-
Node
amdepyc_7543p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7543pMatch-
Node
amdepyc_7543_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7543Match-
Node
amdepyc_7513_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7513Match-
Node
amdepyc_7473x_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7473xMatch-
Node
amdepyc_7453_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7453Match-
Node
amdepyc_74f3_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_74f3Match-
Node
amdepyc_7443p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7443pMatch-
Node
amdepyc_7443_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7443Match-
Node
amdepyc_7413_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7413Match-
Node
amdepyc_7373x_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7373xMatch-
Node
amdepyc_73f3_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_73f3Match-
Node
amdepyc_7343_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7343Match-
Node
amdepyc_7313p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7313pMatch-
Node
amdepyc_7313_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7313Match-
Node
amdepyc_7303p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7303pMatch-
Node
amdepyc_7303_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7303Match-
Node
amdepyc_72f3_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_72f3Match-
Node
amdepyc_7203p_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7203pMatch-
Node
amdepyc_7203_firmwareRange<milanpi_1.0.0.b
AND
amdepyc_7203Match-
Node
amdepyc_9654p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9654pMatch-
Node
amdepyc_9654_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9654Match-
Node
amdepyc_9634_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9634Match-
Node
amdepyc_9554p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9554pMatch-
Node
amdepyc_9554_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9554Match-
Node
amdepyc_9534_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9534Match-
Node
amdepyc_9474f_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9474fMatch-
Node
amdepyc_9454p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9454pMatch-
Node
amdepyc_9454_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9454Match-
Node
amdepyc_9374f_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9374fMatch-
Node
amdepyc_9354p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9354pMatch-
Node
amdepyc_9354_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9354Match-
Node
amdepyc_9334_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9334Match-
Node
amdepyc_9274f_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9274fMatch-
Node
amdepyc_9254_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9254Match-
Node
amdepyc_9224_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9224Match-
Node
amdepyc_9174f_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9174fMatch-
Node
amdepyc_9124_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9124Match-
Node
amdepyc_9684x_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9684xMatch-
Node
amdepyc_9384x_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9384xMatch-
Node
amdepyc_9184x_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9184xMatch-
Node
amdepyc_9754_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9754Match-
Node
amdepyc_9754s_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9754sMatch-
Node
amdepyc_9734_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_9734Match-
Node
amdepyc_8534p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8534pMatch-
Node
amdepyc_8534pn_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8534pnMatch-
Node
amdepyc_8434p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8434pMatch-
Node
amdepyc_8434pn_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8434pnMatch-
Node
amdepyc_8324p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8324pMatch-
Node
amdepyc_8324pn_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8324pnMatch-
Node
amdepyc_8224p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8224pMatch-
Node
amdepyc_8224pn_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8224pnMatch-
Node
amdepyc_8124p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8124pMatch-
Node
amdepyc_8124pn_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8124pnMatch-
Node
amdepyc_8024p_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8024pMatch-
Node
amdepyc_8024pn_firmwareRange<genoapi_1.0.0.8
AND
amdepyc_8024pnMatch-
Node
amdryzen_9_3950x_firmwareMatch-
AND
amdryzen_9_3950xMatch-
Node
amdryzen_9_3950xt_firmwareMatch-
AND
amdryzen_9_3950xtMatch-
Node
amdryzen_9_3900_firmwareMatch-
AND
amdryzen_9_3900Match-
Node
amdryzen_9_3900x_firmwareMatch-
AND
amdryzen_9_3900xMatch-
Node
amdryzen_7_3800x_firmwareMatch-
AND
amdryzen_7_3800xMatch-
Node
amdryzen_7_3800xt_firmwareMatch-
AND
amdryzen_7_3800xtMatch-
Node
amdryzen_7_3700xt_firmwareMatch-
AND
amdryzen_7_3700xtMatch-
Node
amdryzen_5_3600x_firmwareMatch-
AND
amdryzen_5_3600xMatch-
Node
amdryzen_5_3600xt_firmwareMatch-
AND
amdryzen_5_3600xtMatch-
Node
amdryzen_5_3600_firmwareMatch-
AND
amdryzen_5_3600Match-
Node
amdryzen_5_3500x_firmwareMatch-
AND
amdryzen_5_3500xMatch-
Node
amdryzen_5_3500_firmwareMatch-
AND
amdryzen_5_3500Match-
Node
amdryzen_3_3300x_firmwareMatch-
AND
amdryzen_3_3300xMatch-
Node
amdryzen_3_3100_firmwareMatch-
AND
amdryzen_3_3100Match-
Node
amdryzen_9_5950x_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_9_5950xMatch-
Node
amdryzen_9_5900x_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_9_5900xMatch-
Node
amdryzen_9_5900_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_9_5900Match-
Node
amdryzen_7_5800x3d_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_7_5800x3dMatch-
Node
amdryzen_7_5800x_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_7_5800xMatch-
Node
amdryzen_7_5800_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_7_5800Match-
Node
amdryzen_7_5700x_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_7_5700xMatch-
Node
amdryzen_5_5600_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_5_5600Match-
Node
amdryzen_5_5600x_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_5_5600xMatch-
Node
amdryzen_5_5500_firmwareRange<comboam4_v2_pi_1.2.0.6
AND
amdryzen_5_5500Match-
Node
amdryzen_threadripper_3960x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_3960xMatch-
Node
amdryzen_threadripper_3970x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_3970xMatch-
Node
amdryzen_threadripper_3990x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_3990xMatch-
Node
amdryzen_threadripper_pro_3945wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3945wxMatch-
Node
amdryzen_threadripper_pro_3955wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3955wxMatch-
Node
amdryzen_threadripper_pro_3975wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3975wxMatch-
Node
amdryzen_threadripper_pro_3995wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3995wxMatch-
Node
amdryzen_threadripper_pro_3795wx_firmwareRange<chagallwspi-swrx8_1.0.0.0
AND
amdryzen_threadripper_pro_3795wxMatch-
VendorProductVersionCPE
amdepyc_7001_firmware*cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
amdepyc_7001-cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:*
amdepyc_7251_firmware*cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
amdepyc_7251-cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*
amdepyc_7261_firmware*cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
amdepyc_7261-cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*
amdepyc_7281_firmware*cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
amdepyc_7281-cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*
amdepyc_7301_firmware*cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
amdepyc_7301-cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 2741

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 series Desktop Processors “Matisse\"",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors  “Chagall” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "4th Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 3000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 7002",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 7003",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™  Embedded 5000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 7002",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 3000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 7003",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

21.2%