cbcvebase.
CVE-2021-26406
published 2023-05-09

CVE-2021-26406: Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application…

PriorityP432high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.42%
34.8th percentile
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.

Affected

52 ranges· showing 25
VendorProductVersion rangeFixed in
amd1st_gen_amd_epyc_processors——
amd2nd_gen_amd_epyc_processors——
amd2nd_gen_amd_ryzen_threadripper_processors_colfax——
amd3rd_gen_amd_ryzen_threadripper_processors_castle_peak_hedt——
amdamd_ryzen_5000_series_desktop_processors_vermeer_am4——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock——
amdepyc_7232p_firmware——
amdepyc_7251_firmware——
amdepyc_7252_firmware——
amdepyc_7261_firmware——
amdepyc_7262_firmware——
amdepyc_7272_firmware——
amdepyc_7281_firmware——
amdepyc_7282_firmware——
amdepyc_7301_firmware——
amdepyc_7302_firmware——
amdepyc_7302p_firmware——
amdepyc_7351_firmware——
amdepyc_7351p_firmware——
amdepyc_7352_firmware——
amdepyc_7371_firmware——
amdepyc_7401_firmware——
amdepyc_7401p_firmware——
amdepyc_7402_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.