7676 matches found
FreeBSD-SA-21:11.smap
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:11.smap Security Advisory The FreeBSD Project Topic: SMAP bypass Category: core Module: amd64 Announced: 2021-05-26 Credits: I lost my dog if you see him...
Apple macOS 权限许可和访问控制问题漏洞
Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. macOS is vulnerable to a privilege-granting and access-control issue, which arises from an application that does not properly impose security restrictions within the AMD subsystem. A remote attacker could...
About the security content of Security Update 2021-004 Mojave
About the security content of Security Update 2021-004 Mojave This document describes the security content of Security Update 2021-004 Mojave. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurre...
About the security content of Security Update 2021-003 Catalina
About the security content of Security Update 2021-003 Catalina This document describes the security content of Security Update 2021-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...
AMD Secure Encrypted Virtualization Command Injection Vulnerability
AMD Secure Encrypted Virtualization is a software application from AMD USA. Hardware-accelerated memory encryption to protect data in use. AMD Secure Encrypted Virtualization suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands...
AMD Secure Encrypted Virtualization Command Injection Vulnerability (CNVD-2021-37602)
AMD Secure Encrypted Virtualization is a software application from AMD USA. Hardware-accelerated memory encryption to protect data in use. AMD Secure Encrypted Virtualization suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands...
CVE-2020-12967
The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...
CVE-2021-26311
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...
Design/Logic Flaw
The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...
Design/Logic Flaw
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...
CVE-2021-26311 AMD Secure Encrypted Virtualization
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...
CVE-2021-26311
CVE-2021-26311 concerns AMD SEV/SEV-ES where memory can be rearranged in the guest address space without attestation detection, potentially enabling arbitrary code execution in a guest VM if a malicious administrator with server-hypervisor access acts. Documents cite the vulnerability in SEV/SEV-...
CVE-2020-12967 AMD Secure Encrypted Virtualization
The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...
CVE-2020-12967
CVE-2020-12967 relates to AMD SEV/SEV-ES: the lack of nested page table protection could allow arbitrary code execution in a guest VM if a malicious administrator gains control of the server hypervisor. Affected are AMD SEV/SEV-ES-enabled platforms (e.g., AMD EPYC family). The root cause is insuf...
AMD Secure Encrypted Virtualization (SEV) Vulnerabilities - Lenovo Support US
No description provided...
AMD Secure Encrypted Virtualization
Bulletin ID: AMD-SB-1004 Potential Impact: Arbitrary Code Execution Severity: Medium Summary AMD is aware of 2 research papers related to AMD’s Secure Encrypted Virtualization SEV which will be presented at this year’s 15th IEEE Workshop on Offensive Technologies WOOT’21. In the paper titled...
Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method
Summary: Updated Recommendations Section 04/04/2018 Today a team of security researchers disclosed several software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from many types of computing devices with many different vendors’...
New Spectre Flaws in Intel and AMD CPUs Affect Billions of Computers
When Spectre, a class of critical vulnerabilities impacting modern processors, was publicly revealed in January 2018, the researchers behind the discovery said, "As it is not easy to fix, it will haunt us for quite some time," explaining the inspiration behind naming the speculative execution...
Xen unsafe AMD IOMMU page table updates (XSA-347)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an issue allowing x86 guest OS users to cause a denial of service data corruption, cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated...
New Spectre-Like Attacks
Theres new research that demonstrates security vulnerabilities in all of the AMD and Intel chips with micro-op caches, including the ones that were specifically engineered to be resistant to the Spectre/Meltdown attacks of three years ago. Details: The new line of attacks exploits the micro-op...