5.3
Medium
CVE-2023-20566 Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory…
Description
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 3rd Gen AMD EPYC™ Processors | Versions not published | |
| 4th Gen AMD EPYC™ Processors | Versions not published | |
| AMD EPYC™ Embedded 7003 | Versions not published | |
| AMD EPYC™ Embedded 9003 | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of 3rd Gen AMD EPYC™ Processors
The 25 CVEs of 3rd Gen AMD EPYC™ Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…
7.5
High
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a…
7.9
High
CVE-2024-21978
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially…
6.0
Medium