目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1359 元

100%

CVE-2021-46746— AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞

一分钟漏洞结论

影响对象
AMD AMD EPYC™ 7001 Processors
利用判断
尚无明确在野利用证据,仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本;无法立即升级时,限制受影响服务暴露并加强监测。

AMD Secure Encrypted Virtualization和AMD Secure Processor(ASP)都是美国超威半导体(AMD)公司的产品。AMD Secure Encrypted Virtualization是一个应用软件。硬件加速的内存加密,以保护使用中的数据。AMD Secure Processor是一款独立的 ARM Coretex-A5 芯片。 AMD Secure Processor(ASP)、AMD Secure Encrypted Virtualization(SEV

CVSS 5.2 · Medium EPSS 0.15% · P4
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2021-46746 基础信息

漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the return address, causing a stack-based buffer overrun, potentially leading to a denial of service.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
AMD Secure Encrypted Virtualization和AMD Secure Processor(ASP)都是美国超威半导体(AMD)公司的产品。AMD Secure Encrypted Virtualization是一个应用软件。硬件加速的内存加密,以保护使用中的数据。AMD Secure Processor是一款独立的 ARM Coretex-A5 芯片。 AMD Secure Processor(ASP)、AMD Secure Encrypted Virtualization(SEV
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商 产品 影响版本 CPE 订阅
AMD AMD EPYC™ 7001 Processors various -
AMD AMD EPYC™ 7002 Processors various -
AMD AMD EPYC™ 7003 Processors various -
AMD AMD EPYC™ 9004 Processors various -
AMD AMD Ryzen™ 3000 Series Desktop Processors ComboAM4PI 1.0.0.9 -
AMD AMD Ryzen™ 5000 Series Desktop Processors ComboAM4V2 PI 1.2.0.8 -
AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics ComboAM4v2 PI 1.2.0.5 -
AMD AMD Ryzen™ 7000 Series Desktop Processors ComboAM5 1.0.8.0 -
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics - -
AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2 PI 1.2.0.5 -
AMD AMD Ryzen™ Threadripper™ 3000 Series Processors CastlePeakPI-SP3r3 1.0.0.7 -
AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors ChagallWSPI-sWRX8 1.0.0.2 -
AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors ChagallWSPI-sWRX8 1.0.0.2 -
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.0.E -
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PollockPI-FT5 1.0.0.4 -
AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics PicassoPI-FP5 1.0.0.E -
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.8 -
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.8 -
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.8 -
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics MendocinoPI-FT6 1.0.0.6 -
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics RembrandtPI-FP7 1.0.0.5 -
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics RembrandtPI-FP7 1.0.0.5 -
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.8 -
AMD AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.8 -
AMD AMD Ryzen™ 7045 Series Mobile Processors DragonRangeFL1PI 1.0.0.3b -
AMD AMD EPYC™ Embedded 3000 Series Processors various -
AMD AMD EPYC™ Embedded 7002 Series Processors various -
AMD AMD EPYC™ Embedded 7003 Series Processors various -
AMD AMD EPYC™ Embedded 9003 Series Processors various -
AMD AMD Ryzen™ Embedded R1000 Series Processors EmbeddedPI-FP5 1.2.0.A -

二、漏洞 CVE-2021-46746 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2021-46746 的情报信息

请登录查看更多情报信息。

CVE-2021-46746 厂商安全公告 (1)

同批安全公告 · AMD · 2024-08-13 · 共 26 条

CVE-2022-23815 7.5 HIGH AMD Secure Processor 安全漏洞
CVE-2023-20578 7.5 HIGH AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-31349 7.3 HIGH AMD μProf 安全漏洞
CVE-2023-31348 7.3 HIGH AMD μProf 安全漏洞
CVE-2023-31341 7.3 HIGH AMD μProf 安全漏洞
CVE-2021-26344 7.2 HIGH AMD Secure Processor 和 AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-20591 6.5 MEDIUM AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2021-26367 5.7 MEDIUM AMD Graphics Driver 安全漏洞
CVE-2024-21981 5.7 MEDIUM AMD Secure Processor 安全漏洞
CVE-2023-20584 5.3 MEDIUM AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-20509 5.2 MEDIUM AMD Graphics Driver 安全漏洞
CVE-2023-31310 5.0 MEDIUM AMD Graphics Driver 安全漏洞
CVE-2023-31339 4.8 MEDIUM AMD Zynq UltraScale+ 安全漏洞
CVE-2023-20510 4.7 MEDIUM AMD Graphics Driver 安全漏洞
CVE-2023-31356 4.4 MEDIUM AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2021-46772 3.9 LOW AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2021-26387 3.9 LOW AMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-20513 3.3 LOW AMD Graphics Driver 安全漏洞
CVE-2023-31366 3.3 LOW AMD μProf 安全漏洞
CVE-2023-31304 2.3 LOW AMD Graphics Driver 安全漏洞

显示前 20 条,共 26 条。 查看全部 → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-46746

暂无评论


发表评论