Lucene search

[email protected]CVE-2021-26403

HistoryJan 11, 2023 - 8:15 a.m.

CVE-2021-26403

2023-01-1108:15:11

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2021-26403

sev

hypervisor

launch secret

vm confidentiality

nvd

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.7%

JSON

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

CPENameOperatorVersion
amd:epyc_7001_firmwareamd epyc 7001 firmwareltnaplespi_1.0.0.e
amd:epyc_7001_firmwareamd epyc 7001 firmwareeqnaplespi-sp3_1.0.0.h
amd:epyc_7001_firmwareamd epyc 7001 firmwareeq-
amd:epyc_7001_firmwareamd epyc 7001 firmwareeqnaplespi-sp3_1.0.0.g

CPE	Name	Operator	Version
amd:epyc_7001_firmware	amd epyc 7001 firmware	lt	naplespi_1.0.0.e
amd:epyc_7001_firmware	amd epyc 7001 firmware	eq	naplespi-sp3_1.0.0.h
amd:epyc_7001_firmware	amd epyc 7001 firmware	eq	-
amd:epyc_7001_firmware	amd epyc 7001 firmware	eq	naplespi-sp3_1.0.0.g

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

8.7%

JSON

Related for CVE-2021-26403

prion1 cvelist1 amd1