5.3
Moyenne
CVE-2022-23813 The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of…
Description
The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 2nd Gen EPYC | Versions non publiées | |
| 3rd Gen EPYC | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 2nd Gen EPYC
Les 14 CVE de 2nd Gen EPYC →
CVE-2023-20532
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in…
5.3
Moyenne
CVE-2023-20531
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid…
7.5
Élevée
CVE-2023-20529
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value…
7.5
Élevée
CVE-2023-20528
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C…
2.4
Faible