Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2023-31352

A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9004 Processors

Default version status: affected

  • GenoaPI 1.0.0.Cunaffected
  • SEV FW1.55.36unaffected

AMD AMD EPYC™ Embedded 9004

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.7unaffected

References