amperecomputing ampere altra max firmware vulnerabilities and exploits

(subscribe to this query)

Ampere Altra before SRP 1.08b and Altra Max? before SRP 2.05 allow information disclosure of power telemetry via HWmon.

Amperecomputing Ampere Altra Firmware Amperecomputing Ampere Altra Max Firmware

Ampere Altra devices prior to 1.08g and Ampere Altra Max devices prior to 2.05a allow malicious users to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue.

Amperecomputing Ampere Altra Firmware Amperecomputing Ampere Altra Max Firmware

In Ampere AltraMax and Ampere Altra prior to 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.

Amperecomputing Ampere Altra Firmware Amperecomputing Ampere Altra Max Firmware

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component.

Amperecomputing Ampere Altra Firmware Amperecomputing Ampere Altra Max Firmware

Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extracts secret information from the CPU by correlating the power consumption with data being processed on the system.

Amperecomputing Ampere Altra Max Firmware Amperecomputing Ampere Altra Firmware Amperecomputing Ampereone Firmware

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause ...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook