Lucene search
+L

68 matches found

RedHat Linux
RedHat Linux
•added 2024/02/26 7:55 p.m.•19 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.3AI score0.01018EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2024/01/30 12:33 p.m.•16 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/12/01 2:20 a.m.•15 views

SUSE CVE-2023-20592

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

5.3CVSS6AI score0.01018EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•20 views

AMD EPYC Resource Management Error Vulnerability

AMD EPYC is a line of x86 architecture server microprocessors from AMD, known in Chinese as "霄龙", utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from a post-release reuse vulnerability in the SNP Client Environment Page Manager that could allow a...

3.3CVSS6.6AI score0.00204EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•30 views

PT-2023-7412 · Amd +7 · Amd Cpus +7

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue concerns improper or unexpected behavior of the INVD instruction in some AMD CPUs, potentially allowing an attacker with a malicious hypervisor to affect cache line write-back...

9.8CVSS7AI score0.74041EPSS
SaveExploits13References75
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•7 views

CVE-2023-20519: Use After Free

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity...

3.3CVSS5.5AI score0.00204EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•7 views

CVE-2023-20592: Undefined Security Weakness

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine VM memory integrity...

6.5CVSS7AI score0.01018EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•16 views

AMD CPU security vulnerabilities

AMD CPUs are a family of CPUs from AMD. The AMD CPUs suffer from an improper instruction vulnerability that stems from the fact that incorrect or unexpected behavior of the INVD instruction would allow an attacker with a malicious hypervisor to affect the cache line write-back behavior of the CPU...

6.5CVSS6.7AI score0.01018EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/10/10 3:34 p.m.•16 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/09/19 2:07 p.m.•13 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/09/12 9:49 a.m.•16 views

hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem

A flaw was found in some of AMD CPU's due to improper or unexpected behavior of the INVD. This issue may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU, potentially leading to a loss of guest virtual machine VM memory integrity...

6.5CVSS6.5AI score0.01018EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 3:35 a.m.•13 views

SUSE CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.2CVSS5.8AI score0.00333EPSS
SaveExploits0References19
osv_cve
osv_cve
•added 2023/01/11 8:15 a.m.•22 views

CVE-2021-26403

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality...

6.5CVSS5.8AI score0.00126EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/01/10 12:00 a.m.•20 views

PT-2023-1484 · Amd · Amd Secure Encrypted Virtualization

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to insufficient input validation in the implementation of AMD Secure Encrypted Virtualization SEV microcode in AMD processors. This coul...

6.5CVSS6.7AI score0.00126EPSS
SaveExploits0References6
NVD
NVD
•added 2022/05/11 5:15 p.m.•27 views

CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.5CVSS0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/11 12:00 a.m.•19 views

PT-2022-2472 · Amd +1 · Amd Cpus +1

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the implementation of the SEV-SNP Secure Nested Paging protective mechanism for virtual machines running on servers with AMD processors, which is associated with da...

9.8CVSS6.8AI score0.74041EPSS
SaveExploits13References114
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•8 views

CVE-2021-46744: Observable Discrepancy

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.5CVSS6.7AI score0.00333EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/10 8:30 p.m.•27 views

CVE-2021-46744

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/02/04 10:29 p.m.•54 views

CVE-2020-12966

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State SEV-ES and Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP. A local authenticated attacker could potentially exploit this vulnerability leading to...

5.9AI score0.00313EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•7 views

CVE-2020-12966: Exposure of Sensitive Information to an Unauthorized Actor

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State SEV-ES and Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP. A local authenticated attacker could potentially exploit this vulnerability leading to...

5.5CVSS6.1AI score0.00313EPSS
SaveExploits0References2
Rows per page
Query Builder