CVE-2024-21980: Buffer Overflow
Published Aug 5, 2024
·Updated
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.
Affected Software
172 affected components
All of the following
AMD Epyc 7203 Firmware<milanpi_1.0.0.d
AMD Epyc 7203
All of the following
AMD Epyc 7203p Firmware<milanpi_1.0.0.d
AMD Epyc 7203p
All of the following
AMD Epyc 72f3 Firmware<milanpi_1.0.0.d
AMD Epyc 72f3
All of the following
AMD Epyc 7303 Firmware<milanpi_1.0.0.d
AMD Epyc 7303
All of the following
AMD Epyc 7303p Firmware<milanpi_1.0.0.d
AMD Epyc 7303p
All of the following
AMD Epyc 7313 Firmware<milanpi_1.0.0.d
AMD Epyc 7313
All of the following
AMD Epyc 7313p Firmware<milanpi_1.0.0.d
AMD Epyc 7313p
All of the following
AMD Epyc 7343 Firmware<milanpi_1.0.0.d
AMD Epyc 7343
All of the following
AMD Epyc 73f3 Firmware<milanpi_1.0.0.d
AMD Epyc 73f3
All of the following
AMD Epyc 7373x Firmware<milanpi_1.0.0.d
AMD Epyc 7373x
All of the following
AMD Epyc 7413 Firmware<milanpi_1.0.0.d
AMD Epyc 7413
All of the following
AMD Epyc 7443 Firmware<milanpi_1.0.0.d
AMD Epyc 7443
All of the following
AMD Epyc 7443p Firmware<milanpi_1.0.0.d
AMD Epyc 7443p
All of the following
AMD Epyc 74f3 Firmware<milanpi_1.0.0.d
AMD Epyc 74f3
All of the following
AMD Epyc 7453 Firmware<milanpi_1.0.0.d
AMD Epyc 7453
All of the following
AMD Epyc 7473x Firmware<milanpi_1.0.0.d
AMD Epyc 7473x
All of the following
AMD Epyc 7513 Firmware<milanpi_1.0.0.d
AMD Epyc 7513
All of the following
AMD Epyc 7543 Firmware<milanpi_1.0.0.d
AMD Epyc 7543
All of the following
AMD Epyc 7543p Firmware<milanpi_1.0.0.d
AMD Epyc 7543p
All of the following
AMD Epyc 75f3 Firmware<milanpi_1.0.0.d
AMD Epyc 75f3
All of the following
AMD Epyc 7573x Firmware<milanpi_1.0.0.d
AMD Epyc 7573x
All of the following
AMD Epyc 7643 Firmware<milanpi_1.0.0.d
AMD Epyc 7643
All of the following
AMD Epyc 7773x Firmware<milanpi_1.0.0.d
AMD Epyc 7773x
All of the following
AMD Epyc 7643p Firmware<milanpi_1.0.0.d
AMD Epyc 7643p
All of the following
AMD Epyc 7663 Firmware<milanpi_1.0.0.d
AMD Epyc 7663
All of the following
AMD Epyc 7663p Firmware<milanpi_1.0.0.d
AMD Epyc 7663p
All of the following
AMD Epyc 7713 Firmware<milanpi_1.0.0.d
AMD Epyc 7713
All of the following
AMD Epyc 7713p Firmware<milanpi_1.0.0.d
AMD Epyc 7713p
All of the following
AMD Epyc 7763 Firmware<milanpi_1.0.0.d
AMD Epyc 7763
All of the following
AMD Epyc 8024pn Firmware<genoapi_1.0.0.c
AMD Epyc 8024pn
All of the following
AMD Epyc 8024p Firmware<genoapi_1.0.0.c
AMD Epyc 8024p
All of the following
AMD Epyc 8124pn Firmware<genoapi_1.0.0.c
AMD Epyc 8124pn
All of the following
AMD Epyc 8124p Firmware<genoapi_1.0.0.c
AMD Epyc 8124p
All of the following
AMD Epyc 8224pn Firmware<genoapi_1.0.0.c
AMD Epyc 8224pn
All of the following
AMD Epyc 8224p Firmware<genoapi_1.0.0.c
AMD Epyc 8224p
All of the following
AMD Epyc 8324pn Firmware<genoapi_1.0.0.c
AMD Epyc 8324pn
All of the following
AMD Epyc 8324p Firmware<genoapi_1.0.0.c
AMD Epyc 8324p
All of the following
AMD Epyc 8434pn Firmware<genoapi_1.0.0.c
AMD Epyc 8434pn
All of the following
AMD Epyc 8434p Firmware<genoapi_1.0.0.c
AMD Epyc 8434p
All of the following
AMD Epyc 8534pn Firmware<genoapi_1.0.0.c
AMD Epyc 8534pn
All of the following
AMD Epyc 8534p Firmware<genoapi_1.0.0.c
AMD Epyc 8534p
All of the following
AMD Epyc 9734 Firmware<genoapi_1.0.0.c
AMD Epyc 9734
All of the following
AMD Epyc 9754s Firmware<genoapi_1.0.0.c
AMD Epyc 9754s
All of the following
AMD Epyc 9754 Firmware<genoapi_1.0.0.c
AMD Epyc 9754
All of the following
AMD Epyc 9184x Firmware<genoapi_1.0.0.c
AMD Epyc 9184x
All of the following
AMD Epyc 9384x Firmware<genoapi_1.0.0.c
AMD Epyc 9384x
All of the following
AMD Epyc 9684x Firmware<genoapi_1.0.0.c
AMD Epyc 9684x
All of the following
AMD Epyc 9124 Firmware<genoapi_1.0.0.c
AMD Epyc 9124
All of the following
AMD Epyc 9174f Firmware<genoapi_1.0.0.c
AMD Epyc 9174f
All of the following
AMD Epyc 9224 Firmware<genoapi_1.0.0.c
AMD Epyc 9224
All of the following
AMD Epyc 9254 Firmware<genoapi_1.0.0.c
AMD Epyc 9254
All of the following
AMD Epyc 9274f Firmware<genoapi_1.0.0.c
AMD Epyc 9274f
All of the following
AMD Epyc 9334 Firmware<genoapi_1.0.0.c
AMD Epyc 9334
All of the following
AMD Epyc 9354 Firmware<genoapi_1.0.0.c
AMD Epyc 9354
All of the following
AMD Epyc 9354p Firmware<genoapi_1.0.0.c
AMD Epyc 9354p
All of the following
AMD Epyc 9374f Firmware<genoapi_1.0.0.c
AMD Epyc 9374f
All of the following
AMD Epyc 9454 Firmware<genoapi_1.0.0.c
AMD Epyc 9454
All of the following
AMD Epyc 9454p Firmware<genoapi_1.0.0.c
AMD Epyc 9454p
All of the following
AMD Epyc 9474f Firmware<genoapi_1.0.0.c
AMD Epyc 9474f
All of the following
AMD Epyc 9534 Firmware<genoapi_1.0.0.c
AMD Epyc 9534
All of the following
AMD Epyc 9554 Firmware<genoapi_1.0.0.c
AMD Epyc 9554
All of the following
AMD Epyc 9554p Firmware<genoapi_1.0.0.c
AMD Epyc 9554p
All of the following
AMD Epyc 9634 Firmware<genoapi_1.0.0.c
AMD Epyc 9634
All of the following
AMD Epyc 9654 Firmware<genoapi_1.0.0.c
AMD Epyc 9654
All of the following
AMD Epyc 9654p Firmware<genoapi_1.0.0.c
AMD Epyc 9654p
All of the following
AMD Epyc Embedded 7313 Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7313
All of the following
AMD Epyc Embedded 7313p Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7313p
All of the following
AMD Epyc Embedded 7413 Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7413
All of the following
AMD Epyc Embedded 7443 Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7443
All of the following
AMD Epyc Embedded 7443p Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7443p
All of the following
AMD Epyc Embedded 7543 Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7543
All of the following
AMD Epyc Embedded 7543p Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7543p
All of the following
AMD Epyc Embedded 7643 Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7643
All of the following
AMD Epyc Embedded 7713 Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7713
All of the following
AMD Epyc Embedded 7713p Firmware<embmilanpi-sp3_1.0.0.9
AMD Epyc Embedded 7713p
All of the following
AMD Epyc Embedded 9124 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9124
All of the following
AMD Epyc Embedded 9254 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9254
All of the following
AMD Epyc Embedded 9354 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9354
All of the following
AMD Epyc Embedded 9354p Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9354p
All of the following
AMD Epyc Embedded 9454 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9454
All of the following
AMD Epyc Embedded 9454p Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9454p
All of the following
AMD Epyc Embedded 9534 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9534
All of the following
AMD Epyc Embedded 9554 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9554
All of the following
AMD Epyc Embedded 9554p Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9554p
All of the following
AMD Epyc Embedded 9654 Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9654
All of the following
AMD Epyc Embedded 9654p Firmware<embgenoapi-sp5_1.0.0.7
AMD Epyc Embedded 9654p
Event History
Aug 5, 2024
CVE Published
via MITRE·04:06 PM
Data Sourced
via MITRE·04:06 PM
DescriptionSeverityWeakness
Aug 9, 2024
News Published
via The Register·07:16 PM
News Published
via The Register·07:22 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-21980?
The severity of CVE-2024-21980 is categorized as high due to its potential to compromise confidentiality and integrity.
2
How do I fix CVE-2024-21980?
To fix CVE-2024-21980, update the affected AMD EPYC firmware to a version that addresses the vulnerability.
3
Which software is affected by CVE-2024-21980?
CVE-2024-21980 affects multiple versions of AMD EPYC firmware, specifically versions prior to milanpi_1.0.0.d and genoapi_1.0.0.c.
4
What types of attacks could exploit CVE-2024-21980?
CVE-2024-21980 could be exploited by a malicious hypervisor to perform unauthorized write operations, leading to potential data breaches.
5
When was CVE-2024-21980 published?
CVE-2024-21980 was published on August 9, 2024.