1147 matches found
Code injection
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer TLB resulting in unexpected behavior inside the virtual machine VM...
CVE-2021-26340
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer TLB resulting in unexpected behavior inside the virtual machine VM...
CVE-2021-26340
CVE-2021-26340 is a published vulnerability affecting AMD SEV/SEV-ES environments. A malicious hypervisor with an unprivileged attacker process inside a guest VM may fail to flush the TLB, causing unexpected VM behavior and potential loss of integrity and confidentiality. Affected products includ...
CVE-2021-4093
A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...
PT-2021-17016
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description A malicious hypervisor, in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM, may fail to flush the Translation Lookaside Buffer TLB, resulting in...
CVE-2021-26340: Undefined Security Weakness
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer TLB resulting in unexpected behavior inside the virtual machine VM...
CVE-2021-26321
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...
CVE-2021-26323
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...
CVE-2021-26321
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...
CVE-2021-26320
Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...
CVE-2021-26323
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...
Input validation
Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...
Command injection
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...
Authorization
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...
CVE-2021-26323
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...
CVE-2021-26323
CVE-2021-26323 relates to an input validation failure in AMD SNP/SEV handling. The issue is described as: failure to validate SEV Commands while SNP is active may impact memory integrity. Affected technology includes AMD Secure Processor components with SEV/SNP, impacting memory integrity (CVE se...
CVE-2021-26321
CVE-2021-26321 corresponds to an insufficient ID command validation in the AMD SEV Firmware that can allow a local authenticated attacker to cause a denial of service of the Platform Security Processor (PSP). The vulnerability affects AMD EPYC platforms (1st–3rd Gen) with SEV/ASP components; the ...
CVE-2021-26321
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...