{"id":59054,"date":"2020-10-15T00:06:15","date_gmt":"2020-10-14T22:06:15","guid":{"rendered":"https:\/\/www.planet3dnow.de\/cms\/?p=59054"},"modified":"2020-10-15T00:18:43","modified_gmt":"2020-10-14T22:18:43","slug":"schwachstelle-in-amds-grafiktreiber-und-ryzen-master-behoben","status":"publish","type":"post","link":"https:\/\/www.planet3dnow.de\/cms\/59054-schwachstelle-in-amds-grafiktreiber-und-ryzen-master-behoben\/","title":{"rendered":"Schwachstelle in AMDs Grafiktreiber und Ryzen Master behoben"},"content":{"rendered":"

Nach\u00addem in der letz\u00adten Woche bereits eine Schwach\u00adstel\u00adle in AMDs Gra\u00adfik\u00adtrei\u00adber bekannt wur\u00adde<\/a> \u2013 die aller\u00addings erst Anfang 2021 beho\u00adben wer\u00adden soll \u2013 sind nun noch zwei wei\u00adte\u00adre Schwach\u00adstel\u00adlen auf der Pro\u00addukt-Sicher\u00adheits\u00adsei\u00adte<\/a> von AMD<\/span> beschrie\u00adben wor\u00adden, die aber in den aktu\u00adel\u00adlen Ver\u00adsio\u00adnen der Rade\u00adon Soft\u00adware Adre\u00adna\u00adlin 2020 Edi\u00adti\u00adon 20.9.2<\/a> und des Ryzen Mas\u00adter 2.3.0.1591<\/a> bereits beho\u00adben sind. Ein Update ist des\u00adhalb anzuraten.<\/p>\n

Escape Handler (CVE-2020<\/span>\u201312933<\/a>)<\/h3>\n

Die beschrie\u00adbe\u00adne poten\u00adzi\u00adel\u00adle Schwach\u00adstel\u00adle im Gra\u00adfik\u00adtrei\u00adber kann zu einem Blue\u00adscreen (BSoD) f\u00fch\u00adren. Ent\u00addeckt wur\u00adde sie von Talos, wo sie auch n\u00e4her beschrie\u00adben wird<\/a>.<\/p>\n

\u201c<\/span>A deni\u00adal of ser\u00advice vul\u00adnerabi\u00adli\u00adty exists in the D3DKMTEscape hand\u00adler func\u00adtion\u00ada\u00adli\u00adty of AMD<\/span> ATIKMDAG<\/span>.SYS<\/span> 26.20.15029.27017. A spe\u00adci\u00adal\u00adly craf\u00adted D3DKMTEscape request can cau\u00adse an out-of-bounds read in Win\u00addows OS<\/span> ker\u00adnel memo\u00adry area. This vul\u00adnerabi\u00adli\u00adty can be trig\u00adge\u00adred from guest account\u201d<\/p><\/blockquote>\n

Laut Talos hat die Schwach\u00adstel\u00adle einen CVSSv3 Score von 7,1 (High \u2014 Stu\u00adfe 4 von 5) und wur\u00adde am 26. Juni 2020 AMD<\/span> gemeldet.<\/p>\n

AMD<\/span> Ryzen Master Driver Vulnerability (CVE-2020<\/span>\u201312928<\/a>)<\/h3>\n

Die Schwach\u00adstel\u00adle im Ryzen Mas\u00adter wur\u00adde bereits im Ryzen Mas\u00adter 2.2.0.1543 beho\u00adben \u2014 aktu\u00adell ist die Ver\u00adsi\u00adon 2.3.0.1591.<\/p>\n

\u201c<\/span>A rese\u00adar\u00adcher has dis\u00adco\u00adver\u00aded a poten\u00adti\u00adal secu\u00adri\u00adty vul\u00adnerabi\u00adli\u00adty impac\u00adting AMD<\/span> Ryzen\u2122 Mas\u00adter that may allow authen\u00adti\u00adca\u00adted users to ele\u00adva\u00adte from user to sys\u00adtem pri\u00advi\u00adle\u00adges. AMD<\/span> has released a miti\u00adga\u00adti\u00adon in AMD<\/span> Ryzen Mas\u00adter 2.2.0.1543. AMD<\/span> belie\u00adves that the attack must come from a non-pri\u00advi\u00adle\u00adged pro\u00adcess alre\u00ada\u00addy run\u00adning on the sys\u00adtem when the local user runs AMD<\/span> Ryzen\u2122 Mas\u00adter and that a remo\u00adte attack has not been demonstrated.\u201d<\/p><\/blockquote>\n

CreateAllocation (CVE-2020<\/span>\u201312911<\/a>)<\/h3>\n

\u00dcber eine Schwach\u00adstel\u00adle im Gra\u00adfik\u00adtrei\u00adber f\u00fcr Win\u00addows bzw. der ATIKMDAG<\/span>.SYS<\/span>, die beim Ent\u00adde\u00adcker Cis\u00adco Talos n\u00e4her beschrie\u00adben wird.<\/a> Die\u00adse kann einen Blue\u00adscreen (BSoD) aus\u00adl\u00f6\u00adsen. Einen Fix plant AMD<\/span> aller\u00addings erst f\u00fcr das ers\u00adte Quar\u00adtal 2021.<\/p>\n

\u201c<\/span>This vul\u00adnerabi\u00adli\u00adty can be trig\u00adge\u00adred by exe\u00adcu\u00adting the D3DKMTCreateAllocation<\/code> func\u00adtion with mal\u00adfor\u00admed data. This leads to an out-of-bounds read vul\u00adnerabi\u00adli\u00adty in AMD<\/span> ATIKMDAG<\/span>.SYS<\/span> driver.<\/p>\n

An atta\u00adcker can influence the read address for the movzx<\/code> ope\u00adra\u00adti\u00adon by modi\u00adfy\u00ading the pay\u00adload for the D3DKMTCreateAllocation<\/code> func\u00adtion, poten\u00adti\u00adal\u00adly lea\u00adding to an out-of-bound read vul\u00adnerabi\u00adli\u00adty and deni\u00adal of service.\u201d<\/p>\n

Quel\u00adle: Cis\u00adco Talos<\/p><\/blockquote>\n

Laut Talos hat die Schwach\u00adstel\u00adle einen CVSSv3 Score von 7,1 (High \u2014 Stu\u00adfe 4 von 5) und wur\u00adde bereits am 7. Juli 2020 AMD<\/span> gemeldet.<\/p>\n","protected":false},"excerpt":{"rendered":"

Nach\u00addem in der letz\u00adten Woche bereits eine Schwach\u00adstel\u00adle in AMDs Gra\u00adfik\u00adtrei\u00adber bekannt wur\u00adde<\/a> \u2014 die aller\u00addings erst Anfang 2021 beho\u00adben wer\u00adden soll \u2014 sind nun noch zwei wei\u00adte\u00adre Schwach\u00adstel\u00adlen auf der Pro\u00addukt-Sicher\u00adheits\u00adsei\u00adte<\/a> von AMD<\/span> beschrie\u00adben wor\u00adden, die aber in den aktu\u00adells\u00adten Ver\u00adsio\u00adnen der Rade\u00adon Soft\u00adware Adre\u00adna\u00adlin 2020 Edi\u00adti\u00adon 20.9.2<\/a> und des Ryzen Mas\u00adter 2.3.0.1591<\/a> bereits beho\u00adben sind. Ein Update ist des\u00adhalb anzu\u00adra\u00adten. (\u2026) Wei\u00adter\u00adle\u00adsen \u00bb<\/a><\/p>\n","protected":false},"author":593,"featured_media":48484,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"wp_typography_post_enhancements_disabled":false,"ngg_post_thumbnail":0,"footnotes":""},"categories":[12,11],"tags":[966,2079,1629,1610],"class_list":["post-59054","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aktuelles","category-news","tag-amd","tag-radeon-software-adrenalin-edition","tag-ryzen-master","tag-sicherheitsluecke","entry"],"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/59054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/users\/593"}],"replies":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/comments?post=59054"}],"version-history":[{"count":3,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/59054\/revisions"}],"predecessor-version":[{"id":59058,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/posts\/59054\/revisions\/59058"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/media\/48484"}],"wp:attachment":[{"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/media?parent=59054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/categories?post=59054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.planet3dnow.de\/cms\/wp-json\/wp\/v2\/tags?post=59054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}