Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2023-31355

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD 3rd Gen AMD EPYC™ Processors

Default version status: affected

  • various to < MilanPI 1.0.0.Daffected

AMD 4th Gen AMD EPYC™ Processors

Default version status: affected

  • various to < GenoaPI 1.0.0.Caffected

AMD AMD EPYC™ Embedded 7003

Default version status: affected

  • various to < EmbMilanPI-SP3 1.0.0.9affected

AMD AMD EPYC™ Embedded 9003

Default version status: affected

  • various to < EmbGenoaPI-SP5 1.0.0.7affected

References