Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-firmware-mediatekUpgrade kernel-firmware-allUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-brcmUpgrade kernel-firmware-platformUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-nfpUpgrade kernel-firmware-qcomUpgrade kernel-firmware-tiUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-presteraUpgrade kernel-firmware-realtekUpgrade kernel-firmware-i915Upgrade kernel-firmware-qlogicUpgrade kernel-firmware-marvellUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-dpaa2Upgrade kernel-firmwareUpgrade kernel-firmware-serialUpgrade kernel-firmware-radeonUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-networkUpgrade kernel-firmware-intelUpgrade kernel-firmware-mediaUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-bluetoothUpgrade kernel-firmware-atherosUpgrade ucode-amdUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-soundUpgrade kernel-firmware-liquidio | Oct 26, 2022 | May 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub