CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*

History

19 Nov 2021, 16:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 2.1
v3 : 5.5
CPE cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
References (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021 - (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021 - Vendor Advisory
CWE CWE-668

16 Nov 2021, 19:34

Type Values Removed Values Added
New CVE

Information

Published : 2021-11-16 19:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-26327

Mitre link : CVE-2021-26327

CVE.ORG link : CVE-2021-26327


JSON object : View

Products Affected

amd

  • epyc_7543p_firmware
  • epyc_7513_firmware
  • epyc_7003_firmware
  • epyc_7713p
  • epyc_74f3
  • epyc_72f3
  • epyc_7643_firmware
  • epyc_7713p_firmware
  • epyc_7713_firmware
  • epyc_7313_firmware
  • epyc_7313
  • epyc_73f3_firmware
  • epyc_7443
  • epyc_7413
  • epyc_7513
  • epyc_7763_firmware
  • epyc_74f3_firmware
  • epyc_7663
  • epyc_7643
  • epyc_7453_firmware
  • epyc_7413_firmware
  • epyc_7543p
  • epyc_7343
  • epyc_7453
  • epyc_7443_firmware
  • epyc_7713
  • epyc_73f3
  • epyc_7763
  • epyc_7343_firmware
  • epyc_7543_firmware
  • epyc_72f3_firmware
  • epyc_7313p_firmware
  • epyc_7443p
  • epyc_75f3
  • epyc_7543
  • epyc_7663_firmware
  • epyc_7003
  • epyc_7313p
  • epyc_7443p_firmware
  • epyc_75f3_firmware
CWE
CWE-668

Exposure of Resource to Wrong Sphere

CWE-20

Improper Input Validation