7.5
Élevée
CVE-2023-31315 Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…
Description
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 3rd Gen AMD EPYC™ Processors | Versions non publiées | |
| 1st Gen AMD EPYC™ Processors | Versions non publiées | |
| 2nd Gen AMD EPYC™ Processors | Versions non publiées | |
| 4th Gen AMD EPYC™ Processors | Versions non publiées | |
| AMD EPYC™ Embedded 3000 | Versions non publiées | |
| AMD EPYC™ Embedded 7002 | Versions non publiées | |
| AMD EPYC™ Embedded 7003 | Versions non publiées | |
| AMD EPYC™ Embedded 9003 | Versions non publiées | |
| AMD Ryzen™ Embedded R1000 | Versions non publiées |
Afficher les 59 autres branches Masquer les 59 autres branches
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 3rd Gen AMD EPYC™ Processors
Les 25 CVE de 3rd Gen AMD EPYC™ Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
Élevée
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a…
7.9
Élevée
CVE-2024-21978
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially…
6.0
Moyenne
CVE-2023-31355
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC…
6.0
Moyenne