deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-21773
Published: 2023-01-10
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21773; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21773
CVE: CVE-2023-21774
Published: 2023-01-10
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21774; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21774
CVE: CVE-2023-21776
Published: 2023-01-10
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21776; http://packetstormsecurity.com/files/172300/Windows-Kernel-CmpDoReDoCreateKey-CmpDoReOpenTransKey-Out-Of-Bounds-Read.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21776
CVE: CVE-2023-21779
Published: 2023-01-10
Description: Visual Studio Code Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21779; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21779
CVE: CVE-2023-21780
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21780; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21780
CVE: CVE-2023-21781
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21781; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21781
CVE: CVE-2023-21782
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21782; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21782
CVE: CVE-2023-21783
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21783; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21783
CVE: CVE-2023-21784
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21784; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21784
CVE: CVE-2023-21785
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21785; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21785
CVE: CVE-2023-21786
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21786; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21786
CVE: CVE-2023-21787
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21787; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21787
CVE: CVE-2023-21788
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21788; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21788
CVE: CVE-2023-21789
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-369
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21789; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21789
CVE: CVE-2023-21790
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21790; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21790
CVE: CVE-2023-21791
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21791; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21791
CVE: CVE-2023-21792
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21792; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21792
CVE: CVE-2023-21793
Published: 2023-01-10
Description: 3D Builder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21793; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21793
CVE: CVE-2023-22945
Published: 2023-01-11
Description: In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll as mentors or edit any of their mentorship-related properties.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://gerrit.wikimedia.org/r/q/Id1b83fcd58eccb8b2dfea44a3ab2f72314860d88; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/; https://phabricator.wikimedia.org/T321733
CVE: CVE-2022-43389
Published: 2023-01-11
Description: A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unauthenticated attacker to execute some OS commands or to cause denial-of-service (DoS) conditions on a vulnerable device.
CVSS Score: 8.6 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
CVE: CVE-2022-43390
Published: 2023-01-11
Description: A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to execute some OS commands on a vulnerable device by sending a crafted HTTP request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
CVE: CVE-2022-43391
Published: 2023-01-11
Description: A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted HTTP request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
CVE: CVE-2022-43392
Published: 2023-01-11
Description: A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated attacker to cause denial-of-service (DoS) conditions by sending a crafted authorization request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-buffer-overflow-vulnerabilities-of-cpe-fiber-onts-and-wifi-extenders
CVE: CVE-2022-43393
Published: 2023-01-11
Description: An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70(ABMH.8)C0, which could allow an unauthenticated attacker to corrupt the contents of the memory and result in a denial-of-service (DoS) condition on a vulnerable device.
CVSS Score: 8.2 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-switches; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-dos-vulnerability-of-switches
CVE: CVE-2022-48252
Published: 2023-01-11
Description: The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/jokob-sk/Pi.Alert/security/advisories/GHSA-vhg3-f6gv-j89r; https://github.com/jokob-sk/Pi.Alert/security/advisories/GHSA-vhg3-f6gv-j89r
CVE: CVE-2023-22947
Published: 2023-01-11
Description: Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in the service executable's folder. This occurs because the installation goes under C:\opt (rather than C:\Program Files) by default. NOTE: the vendor disputes the significance of this report, stating that "We consider the ACLs a best effort thing" and "it was a documentation mistake."
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-427
References: https://shibboleth.atlassian.net/browse/SSPCPP-961; https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/[PII_REDACTED]/Install+on+Windows#Restricting-ACLs; https://shibboleth.atlassian.net/browse/SSPCPP-961
CVE: CVE-2022-48253
Published: 2023-01-11
Description: nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://nazgul.ch/dev/nostromo_cl.txt; https://www.soteritsecurity.com/blog/2023/01/nostromo_from_directory_traversal_to_RCE.html; https://nazgul.ch/dev/nostromo_cl.txt
CVE: CVE-2023-22958
Published: 2023-01-11
Description: The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/piuppi/Proof-of-Concepts/blob/main/Syracom/SecureLogin2FA-OpenRedirect.md; https://github.com/piuppi/Proof-of-Concepts/blob/main/Syracom/SecureLogin2FA-OpenRedirect.md
CVE: CVE-2022-0553
Published: 2023-01-11
Description: There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-319
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wrj2-9vj9-rrcp; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wrj2-9vj9-rrcp
CVE: CVE-2023-22959
Published: 2023-01-11
Description: WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/chenan224/webchess_sqli_poc; https://sourceforge.net/p/webchess/bugs/84/; https://github.com/chenan224/webchess_sqli_poc
CVE: CVE-2021-3966
Published: 2023-01-11
Description: usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-122, CWE-120
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hfxq-3w6x-fv2m; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hfxq-3w6x-fv2m
CVE: CVE-2022-42271
Published: 2023-01-11
Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-120
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5435; https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE: CVE-2023-22963
Published: 2023-01-11
Description: The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/advisories/GHSA-4xh4-v2pq-jvhm; https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm; https://github.com/advisories/GHSA-4xh4-v2pq-jvhm
CVE: CVE-2012-10004
Published: 2023-01-11
Description: A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basic_cart_checkout_form_submit of the file basic_cart.cart.inc. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.x-1.1.1 is able to address this issue. The patch is identified as a10424ccd4b3b4b433cf33b73c1ad608b11890b4. It is recommended to upgrade the affected component. VDB-217950 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/backdrop-contrib/basic_cart/commit/a10424ccd4b3b4b433cf33b73c1ad608b11890b4; https://github.com/backdrop-contrib/basic_cart/releases/tag/1.x-1.1.1; https://vuldb.com/?ctiid.217950
CVE: CVE-2015-10036
Published: 2023-01-11
Description: A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 87405b74fe651892d79d0dff62ed17a7eaef6a60. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217951.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/kylebebak/dronfelipe/commit/87405b74fe651892d79d0dff62ed17a7eaef6a60; https://vuldb.com/?ctiid.217951; https://vuldb.com/?id.217951
CVE: CVE-2015-10037
Published: 2023-01-11
Description: A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 34eed1f7b9295d1424912f79989d8aba5de41e9f. It is recommended to apply a patch to fix this issue. The identifier VDB-217965 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/marinaguimaraes/ACI_Escola/commit/34eed1f7b9295d1424912f79989d8aba5de41e9f; https://vuldb.com/?ctiid.217965; https://vuldb.com/?id.217965
CVE: CVE-2021-26316
Published: 2023-01-11
Description: Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
CVE: CVE-2021-26328
Published: 2023-01-11
Description: Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.



CVSS Score: 4.4 (MEDIUM)
CWE: CWE-358
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26343
Published: 2023-01-11
Description: Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.



CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26346
Published: 2023-01-11
Description: Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
CVE: CVE-2021-26355
Published: 2023-01-11
Description: Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-693
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26396
Published: 2023-01-11
Description: Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.


CVSS Score: 4.4 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26398
Published: 2023-01-11
Description: Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.


CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26402
Published: 2023-01-11
Description: Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.


CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26403
Published: 2023-01-11
Description: Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26404
Published: 2023-01-11
Description: Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26407
Published: 2023-01-11
Description: A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26409
Published: 2023-01-11
Description: Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.  


CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-46767
Published: 2023-01-11
Description: Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-46768
Published: 2023-01-11
Description: Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-46779
Published: 2023-01-11
Description: Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.

CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-46791
Published: 2023-01-11
Description: Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-46795
Published: 2023-01-11
Description: A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
CVE: CVE-2022-23813
Published: 2023-01-11
Description: The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2022-23814
Published: 2023-01-11
Description: Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2023-0161
Published: 2023-01-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.