Information disclosure

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State SEV-ES and Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP. A local authenticated attacker could potentially exploit this vulnerability leading to...

CVE-2020-12966

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State SEV-ES and Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP. A local authenticated attacker could potentially exploit this vulnerability leading to...

CVE-2020-12966

CVE-2020-12966 corresponds to an information-disclosure vulnerability in AMD EPYC processors’ SEV-ES and SEV-SNP. A local authenticated attacker could leak guest data via the malicious hypervisor. Affected products include AMD EPYC generations with SEV/SEV-ES, with SEV-SNP enabling a mitigation p...

CVE-2020-12966: Exposure of Sensitive Information to an Unauthorized Actor

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State SEV-ES and Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP. A local authenticated attacker could potentially exploit this vulnerability leading to...

CVE-2021-26323

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...

CVE-2021-26323

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...

CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

Authorization

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...

Input validation

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

CVE-2021-26327

The CVE-2021-26327 entry concerns AMD SNP Firmware. Affected component: AMD SNP Firmware; root cause: insufficient validation of guest context, leading to potential loss of guest confidentiality. Impact: confidentiality can be partially exposed (per CVSS notes), with local access required. Public...

CVE-2021-26323

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...

CVE-2021-26323

CVE-2021-26323 relates to an input validation failure in AMD SNP/SEV handling. The issue is described as: failure to validate SEV Commands while SNP is active may impact memory integrity. Affected technology includes AMD Secure Processor components with SEV/SNP, impacting memory integrity (CVE se...

PT-2021-17006

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description The issue is related to insufficient input validation in the SNP GUEST REQUEST command, which may lead to a potential data abort error and a denial of service. Recommendations At the moment...

PT-2021-17008

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to insufficient validation of guest context in the SNP Firmware, which could potentially lead to a loss of guest confidentiality. Recommendations At the moment,...

PT-2021-17007

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to a failure to validate VM HSAVE PA during SNP INIT, which may result in a loss of memory integrity. Recommendations At the moment, there is no information about...

CVE-2021-26323: Improper Input Validation

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity...

PT-2021-17005

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to the failure to validate SEV Commands while SNP is active, which may result in a potential impact to memory integrity...

CVE-2021-26327: Improper Input Validation

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality...

AMD Secure Encryption Virtualization (SEV) Information Disclosure

Bulletin ID: AMD-SB-1013 Potential Impact: Information Disclosure Severity: Medium Summary AMD received notification of a potential security vulnerability from a team of researchers led by Professor Yinqian Zhang from Southern University of Science and Technology SUSTech. A paper titled...

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV)

Bulletin ID: AMD-SB-1023 Potential Impact: Loss of Integrity, Confidentiality and Availability Summary A malicious hypervisor HV along with an unprivileged process controlled by an attacker and executing in a guest VM, may maliciously control the process of flushing the Translation Lookaside Buff...