Not rated
CVE-2023-20519 A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to…
Description
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 3rd Gen AMD EPYC™ Processors | Versions not published | |
| 4th Gen AMD EPYC™ Processors | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of 3rd Gen AMD EPYC™ Processors
The 25 CVEs of 3rd Gen AMD EPYC™ Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…
7.5
High
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a…
7.9
High
CVE-2024-21978
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially…
6.0
Medium