CVE-2023-31346

2024-02-1319:18:19

AMD

github.com

sev firmware

privileged attacker

stale data

memory initialization

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Failure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data
from other guests.

CNA Affected

[
  {
    "vendor": "AMD",
    "product": "3rd Gen AMD EPYC™ Processors",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ],
    "platforms": [
      "x86"
    ],
    "packageName": "PI",
    "defaultStatus": "affected"
  },
  {
    "vendor": " AMD",
    "product": "4th Gen AMD EPYC™ Processors ",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ],
    "platforms": [
      "x86"
    ],
    "packageName": "PI",
    "defaultStatus": "affected"
  }
]