CVE-2023-31347

2024-02-1319:18:51

AMD

www.cve.org

sev firmware

code bug

incorrect tsc

guest integrity

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

Due to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a
guest to observe an incorrect TSC when Secure TSC is enabled potentially
resulting in a loss of guest integrity.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "4th Gen AMD EPYC™ Processors ",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]