Lucene search
+L

360 matches found

Vulnrichment
Vulnrichment
•added 2023/11/14 6:54 p.m.•22 views

CVE-2023-20592

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

6.8AI score0.01018EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2023/11/14 6:54 p.m.•57 views

CVE-2023-20592

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

6.5CVSS6.6AI score0.01018EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/11/14 6:54 p.m.•62 views

CVE-2023-20566

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity...

5.3CVSS8.7AI score0.00367EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/11/14 6:54 p.m.•16 views

CVE-2023-20566

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity...

5.3CVSS6.7AI score0.00367EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/14 6:54 p.m.•84 views

CVE-2023-20566

CVE-2023-20566: Improper address validation in ASP with SNP enabled may potentially compromise guest memory integrity. In SUSE advisories SUSE-SU-2023:4665-1 and SUSE-SU-2023:4664-1, kernel-firmware updates mitigate this alongside other SNP/SMU-related issues by updating AMD ucode to 20231030 and...

7.5CVSS7.1AI score0.00367EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/14 6:53 p.m.•83 views

CVE-2022-23830

CVE-2022-23830 affects AMD SNP/SMM scenarios where SMM configuration may not be immutable as intended, potentially causing a limited loss of guest memory integrity. The connected advisories (AMD security bulletins and SUSE kernel-firmware updates) indicate mitigation through firmware updates (PI ...

5.3CVSS6.3AI score0.00348EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/14 6:53 p.m.•41 views

CVE-2022-23830

SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity...

1.9CVSS7.5AI score0.00348EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•16 views

AMD EPYC Security Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "Xiao Long", utilizing the Zen microarchitecture. A security vulnerability in AMD EPYC, which stems from incorrect address validation in SNP-enabled ASPs, could allow an attacker to compromise client memor...

7.5CVSS6.7AI score0.00367EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2023/11/14 12:00 a.m.•60 views

CVE-2023-20592

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

6.5CVSS6.6AI score0.01018EPSS
SaveExploits0References3
Amd
Amd
•added 2023/11/14 12:00 a.m.•100 views

AMD INVD Instruction Security Notice

Bulletin ID: AMD-SB-3005 Potential Impact: Memory integrity Severity: Medium Summary External researchers reported a potential vulnerability with the INVD instruction that may lead to a loss of SEV-ES and SEV-SNP guest virtual machine VM memory integrity. CVE Details Refer to Glossary for...

6.5CVSS6.2AI score0.01018EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•3 views

CVE-2023-20592: Undefined Security Weakness

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

6.5CVSS7AI score0.01018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•27 views

PT-2023-7412 · Amd +7 · Amd Cpus +7

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue concerns improper or unexpected behavior of the INVD instruction in some AMD CPUs, potentially allowing an attacker with a malicious hypervisor to affect cache line write-back...

9.8CVSS7AI score0.74041EPSS
SaveExploits13References75
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•1 views

CVE-2023-20566: Undefined Security Weakness

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity...

7.5CVSS7.3AI score0.00367EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•2 views

CVE-2022-23830: Undefined Security Weakness

SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity...

5.3CVSS6AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•14 views

AMD CPU 安全漏洞

AMD CPUs are a family of CPUs from AMD. The AMD CPUs suffer from an improper instruction vulnerability that stems from the fact that incorrect or unexpected behavior of the INVD instruction would allow an attacker with a malicious hypervisor to affect the cache line write-back behavior of the CPU...

6.5CVSS6.7AI score0.01018EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•11 views

PT-2023-12740 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a potential limited loss of guest memory integrity due to SMM configuration not being immutable as intended when SNP is enabled...

9.8CVSS5.8AI score0.01018EPSS
SaveExploits0References31
RedHat Linux
RedHat Linux
•added 2023/10/10 3:34 p.m.•13 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/09/19 2:07 p.m.•12 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/09/12 9:49 a.m.•14 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2023/08/08 7:00 a.m.•78 views

Memory Integrity System Readiness Scan Tool Defense in Depth Update

The Memory Integrity System Readiness Scan Tool hvciscanamd64.exe and hvciscanarm64.exe is used to check for compatibility issues with memory integrity, also known as hypervisor-protected code integrity HVCI. The original version was published without a RSRC section, which contains resource...

7.3AI score
SaveExploits0
Rows per page
Query Builder