CVE-2018-8933

The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3.

• CWE-732

• https://amdflaws.com/Third Party Advisory
• https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/Third Party Advisory
• https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-researchVendor Advisory
• https://safefirmware.com/amdflaws_whitepaper.pdfThird Party Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us
• https://amdflaws.com/Third Party Advisory
• https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/Third Party Advisory
• https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-researchVendor Advisory
• https://safefirmware.com/amdflaws_whitepaper.pdfThird Party Advisory
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us

Published

Mar 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8927Improper authorization vulnerability in SYNO.Cal.Event in Ca…5.4
• CVE-2018-8928Cross-site scripting (XSS) vulnerability in Address Book Edi…6.5
• CVE-2018-8929Improper restriction of communication channel to intended en…7.3
• CVE-2018-8930The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile proc…
• CVE-2018-8931The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips h…
• CVE-2018-8932The AMD Ryzen and Ryzen Pro processor chips have insufficien…
• CVE-2018-8934The Promontory chipset, as used in AMD Ryzen and Ryzen Pro p…
• CVE-2018-8935The Promontory chipset, as used in AMD Ryzen and Ryzen Pro p…
• CVE-2018-8936The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile proc…
• CVE-2018-8937An issue was discovered in Open-AudIT Professional 2.1. It i…
• CVE-2018-8938A Code Injection issue was discovered in DlgSelectMibFile.as…
• CVE-2018-8939An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsU…