CVE-2021-26345: Medium severity amd epyc 7h12 firmware vulnerability

Q: What is the severity of CVE-2021-26345?

The severity of CVE-2021-26345 is considered high due to its potential to enable denial of service through out-of-bounds memory reads.

Q: How do I fix CVE-2021-26345?

To remediate CVE-2021-26345, update to the latest firmware versions provided by AMD for affected EPYC processors.

Q: What types of systems are affected by CVE-2021-26345?

CVE-2021-26345 affects specific firmware versions of AMD EPYC processors, particularly those with versions below romepi_1.0.0.f.

Q: Can CVE-2021-26345 be exploited remotely?

Yes, CVE-2021-26345 can potentially be exploited by a privileged attacker with access to the system.

Q: What are the potential consequences of CVE-2021-26345 exploitation?

Exploitation of CVE-2021-26345 could lead to system instability, resulting in a denial of service condition.

Published Nov 14, 2023

Updated

Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.

Affected Software

180 affected components

All of the following

AMD Epyc 7h12 Firmware<romepi_1.0.0.f

AMD Epyc 7h12

All of the following

AMD Epyc 7f72 Firmware<romepi_1.0.0.f

AMD Epyc 7f72

All of the following

AMD Epyc 7f52 Firmware<romepi_1.0.0.f

AMD Epyc 7f52

All of the following

AMD Epyc 7f32 Firmware<romepi_1.0.0.f

AMD Epyc 7f32

All of the following

AMD Epyc 7742 Firmware<romepi_1.0.0.f

AMD Epyc 7742

All of the following

AMD Epyc 7702p Firmware<romepi_1.0.0.f

AMD Epyc 7702p

All of the following

AMD Epyc 7702 Firmware<romepi_1.0.0.f

AMD Epyc 7702

All of the following

AMD Epyc 7662 Firmware<romepi_1.0.0.f

AMD Epyc 7662

All of the following

AMD Epyc 7642 Firmware<romepi_1.0.0.f

AMD Epyc 7642

All of the following

AMD Epyc 7552 Firmware<romepi_1.0.0.f

AMD Epyc 7552

All of the following

AMD Epyc 7542 Firmware<romepi_1.0.0.f

AMD Epyc 7542

All of the following

AMD Epyc 7532 Firmware<romepi_1.0.0.f

AMD Epyc 7532

All of the following

AMD Epyc 7502p Firmware<romepi_1.0.0.f

AMD Epyc 7502p

All of the following

AMD Epyc 7502 Firmware<romepi_1.0.0.f

AMD Epyc 7502

All of the following

AMD Epyc 7452 Firmware<romepi_1.0.0.f

AMD Epyc 7452

All of the following

AMD Epyc 7402p Firmware<romepi_1.0.0.f

AMD Epyc 7402p

All of the following

AMD Epyc 7402 Firmware<romepi_1.0.0.f

AMD Epyc 7402

All of the following

AMD Epyc 7352 Firmware<romepi_1.0.0.f

AMD Epyc 7352

All of the following

AMD Epyc 7302p Firmware<romepi_1.0.0.f

AMD Epyc 7302p

All of the following

AMD Epyc 7302 Firmware<romepi_1.0.0.f

AMD Epyc 7302

All of the following

AMD Epyc 7282 Firmware<romepi_1.0.0.f

AMD Epyc 7282

All of the following

AMD Epyc 7272 Firmware<romepi_1.0.0.f

AMD Epyc 7272

All of the following

AMD Epyc 7262 Firmware<romepi_1.0.0.f

AMD Epyc 7262

All of the following

AMD Epyc 7252 Firmware<romepi_1.0.0.f

AMD Epyc 7252

All of the following

AMD Epyc 7232p Firmware<romepi_1.0.0.f

AMD Epyc 7232p

All of the following

AMD Epyc 7203 Firmware<milanpi_1.0.0.a

AMD Epyc 7203

All of the following

AMD Epyc 7203p Firmware<milanpi_1.0.0.a

AMD Epyc 7203p

All of the following

AMD Epyc 72f3 Firmware<milanpi_1.0.0.a

AMD Epyc 72f3

All of the following

AMD Epyc 7303 Firmware<milanpi_1.0.0.a

AMD Epyc 7303

All of the following

AMD Epyc 7303p Firmware<milanpi_1.0.0.a

AMD Epyc 7303p

All of the following

AMD Epyc 7313 Firmware<milanpi_1.0.0.a

AMD Epyc 7313

All of the following

AMD Epyc 7313p Firmware<milanpi_1.0.0.a

AMD Epyc 7313p

All of the following

AMD Epyc 7343 Firmware<milanpi_1.0.0.a

AMD Epyc 7343

All of the following

AMD Epyc 73f3 Firmware<milanpi_1.0.0.a

AMD Epyc 73f3

All of the following

AMD Epyc 7373x Firmware<milanpi_1.0.0.a

AMD Epyc 7373x

All of the following

AMD Epyc 7413 Firmware<milanpi_1.0.0.a

AMD Epyc 7413

All of the following

AMD Epyc 7443 Firmware<milanpi_1.0.0.a

AMD Epyc 7443

All of the following

AMD Epyc 7443p Firmware<milanpi_1.0.0.a

AMD Epyc 7443p

All of the following

AMD Epyc 74f3 Firmware<milanpi_1.0.0.a

AMD Epyc 74f3

All of the following

AMD Epyc 7453 Firmware<milanpi_1.0.0.a

AMD Epyc 7453

All of the following

AMD Epyc 7473x Firmware<milanpi_1.0.0.a

AMD Epyc 7473x

All of the following

AMD Epyc 7513 Firmware<milanpi_1.0.0.a

AMD Epyc 7513

All of the following

AMD Epyc 7543 Firmware<milanpi_1.0.0.a

AMD Epyc 7543

All of the following

AMD Epyc 7543p Firmware<milanpi_1.0.0.a

AMD Epyc 7543p

All of the following

AMD Epyc 75f3 Firmware<milanpi_1.0.0.a

AMD Epyc 75f3

All of the following

AMD Epyc 7573x Firmware<milanpi_1.0.0.a

AMD Epyc 7573x

All of the following

AMD Epyc 7643 Firmware<milanpi_1.0.0.a

AMD Epyc 7643

All of the following

AMD Epyc 7773x Firmware<milanpi_1.0.0.a

AMD Epyc 7773x

All of the following

AMD Epyc 7643p Firmware<milanpi_1.0.0.a

AMD Epyc 7643p

All of the following

AMD Epyc 7663 Firmware<milanpi_1.0.0.a

AMD Epyc 7663

All of the following

AMD Epyc 7663p Firmware<milanpi_1.0.0.a

AMD Epyc 7663p

All of the following

AMD Epyc 7713 Firmware<milanpi_1.0.0.a

AMD Epyc 7713

All of the following

AMD Epyc 7713p Firmware<milanpi_1.0.0.a

AMD Epyc 7713p

All of the following

AMD Epyc 7763 Firmware<milanpi_1.0.0.a

AMD Epyc 7763

All of the following

AMD Epyc 8024pn Firmware<genoapi_1.0.0.0

AMD Epyc 8024pn

All of the following

AMD Epyc 8024p Firmware<genoapi_1.0.0.0

AMD Epyc 8024p

All of the following

AMD Epyc 8124pn Firmware<genoapi_1.0.0.0

AMD Epyc 8124pn

All of the following

AMD Epyc 8124p Firmware<genoapi_1.0.0.0

AMD Epyc 8124p

All of the following

AMD Epyc 8224pn Firmware<genoapi_1.0.0.0

AMD Epyc 8224pn

All of the following

AMD Epyc 8224p Firmware<genoapi_1.0.0.0

AMD Epyc 8224p

All of the following

AMD Epyc 8324pn Firmware<genoapi_1.0.0.0

AMD Epyc 8324pn

All of the following

AMD Epyc 8324p Firmware<genoapi_1.0.0.0

AMD Epyc 8324p

All of the following

AMD Epyc 8434pn Firmware<genoapi_1.0.0.0

AMD Epyc 8434pn

All of the following

AMD Epyc 8434p Firmware<genoapi_1.0.0.0

AMD Epyc 8434p

All of the following

AMD Epyc 8534pn Firmware<genoapi_1.0.0.0

AMD Epyc 8534pn

All of the following

AMD Epyc 8534p Firmware<genoapi_1.0.0.0

AMD Epyc 8534p

All of the following

AMD Epyc 9734 Firmware<genoapi_1.0.0.0

AMD Epyc 9734

All of the following

AMD Epyc 9754s Firmware<genoapi_1.0.0.0

AMD Epyc 9754s

All of the following

AMD Epyc 9754 Firmware<genoapi_1.0.0.0

AMD Epyc 9754

All of the following

AMD Epyc 9184x Firmware<genoapi_1.0.0.0

AMD Epyc 9184x

All of the following

AMD Epyc 9384x Firmware<genoapi_1.0.0.0

AMD Epyc 9384x

All of the following

AMD Epyc 9684x Firmware<genoapi_1.0.0.0

AMD Epyc 9684x

All of the following

AMD Epyc 9124 Firmware<genoapi_1.0.0.0

AMD Epyc 9124

All of the following

AMD Epyc 9174f Firmware<genoapi_1.0.0.0

AMD Epyc 9174f

All of the following

AMD Epyc 9224 Firmware<genoapi_1.0.0.0

AMD Epyc 9224

All of the following

AMD Epyc 9254 Firmware<genoapi_1.0.0.0

AMD Epyc 9254

All of the following

AMD Epyc 9274f Firmware<genoapi_1.0.0.0

AMD Epyc 9274f

All of the following

AMD Epyc 9334 Firmware<genoapi_1.0.0.0

AMD Epyc 9334

All of the following

AMD Epyc 9354 Firmware<genoapi_1.0.0.0

AMD Epyc 9354

All of the following

AMD Epyc 9354p Firmware<genoapi_1.0.0.0

AMD Epyc 9354p

All of the following

AMD Epyc 9374f Firmware<genoapi_1.0.0.0

AMD Epyc 9374f

All of the following

AMD Epyc 9454 Firmware<genoapi_1.0.0.0

AMD Epyc 9454

All of the following

AMD Epyc 9454p Firmware<genoapi_1.0.0.0

AMD Epyc 9454p

All of the following

AMD Epyc 9474f Firmware<genoapi_1.0.0.0

AMD Epyc 9474f

All of the following

AMD Epyc 9534 Firmware<genoapi_1.0.0.0

AMD Epyc 9534

All of the following

AMD Epyc 9554 Firmware<genoapi_1.0.0.0

AMD Epyc 9554

All of the following

AMD Epyc 9554p Firmware<genoapi_1.0.0.0

AMD Epyc 9554p

All of the following

AMD Epyc 9634 Firmware<genoapi_1.0.0.0

AMD Epyc 9634

All of the following

AMD Epyc 9654 Firmware<genoapi_1.0.0.0

AMD Epyc 9654

All of the following

AMD Epyc 9654p Firmware<genoapi_1.0.0.0

AMD Epyc 9654p

Event History

Nov 14, 2023

CVE Published

via MITRE·06:53 PM

Data Sourced

via MITRE·06:53 PM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2021-26345?

The severity of CVE-2021-26345 is considered high due to its potential to enable denial of service through out-of-bounds memory reads.

How do I fix CVE-2021-26345?

To remediate CVE-2021-26345, update to the latest firmware versions provided by AMD for affected EPYC processors.

What types of systems are affected by CVE-2021-26345?

CVE-2021-26345 affects specific firmware versions of AMD EPYC processors, particularly those with versions below romepi_1.0.0.f.

Can CVE-2021-26345 be exploited remotely?

Yes, CVE-2021-26345 can potentially be exploited by a privileged attacker with access to the system.

What are the potential consequences of CVE-2021-26345 exploitation?

Exploitation of CVE-2021-26345 could lead to system instability, resulting in a denial of service condition.

CVE-2021-26345: Medium severity amd epyc 7h12 firmware vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2021-26345?

How do I fix CVE-2021-26345?

What types of systems are affected by CVE-2021-26345?

Can CVE-2021-26345 be exploited remotely?

What are the potential consequences of CVE-2021-26345 exploitation?

Company

Resources

Contact