CVE-2021-26311

Katalog CVE

CVSS 7.2 · High EPSS 1,7%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada amd epyc 7232p, amd epyc 7251 +58 lainnya. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

Rincian

Terbit di NVD

13 Mei 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 65 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1004 advisory vendor