CVE-2023-31355

EPSS 0.93%
Veröffentlicht 05.08.2024 16:15:34
Zuletzt bearbeitet 26.11.2024 19:10:21
Quelle psirt@amd.com
Teams Watchlist Login
Unerledigt Login

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Amd ≫ Epyc 7203 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7203 Version-

Amd ≫ Epyc 7203p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7203p Version-

Amd ≫ Epyc 72f3 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 72f3 Version-

Amd ≫ Epyc 7303 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7303 Version-

Amd ≫ Epyc 7303p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7303p Version-

Amd ≫ Epyc 7313 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7313 Version-

Amd ≫ Epyc 7313p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7313p Version-

Amd ≫ Epyc 7343 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7343 Version-

Amd ≫ Epyc 73f3 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 73f3 Version-

Amd ≫ Epyc 7373x Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7373x Version-

Amd ≫ Epyc 7413 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7413 Version-

Amd ≫ Epyc 7443 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7443 Version-

Amd ≫ Epyc 7443p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7443p Version-

Amd ≫ Epyc 74f3 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 74f3 Version-

Amd ≫ Epyc 7453 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7453 Version-

Amd ≫ Epyc 7473x Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7473x Version-

Amd ≫ Epyc 7513 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7513 Version-

Amd ≫ Epyc 7543 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7543 Version-

Amd ≫ Epyc 7543p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7543p Version-

Amd ≫ Epyc 75f3 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 75f3 Version-

Amd ≫ Epyc 7573x Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7573x Version-

Amd ≫ Epyc 7643 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7643 Version-

Amd ≫ Epyc 7773x Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7773x Version-

Amd ≫ Epyc 7643p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7643p Version-

Amd ≫ Epyc 7663 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7663 Version-

Amd ≫ Epyc 7663p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7663p Version-

Amd ≫ Epyc 7713 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7713 Version-

Amd ≫ Epyc 7713p Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7713p Version-

Amd ≫ Epyc 7763 Firmware Version < milanpi_1.0.0.d

Amd ≫ Epyc 7763 Version-

Amd ≫ Epyc 8024pn Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8024pn Version-

Amd ≫ Epyc 8024p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8024p Version-

Amd ≫ Epyc 8124pn Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8124pn Version-

Amd ≫ Epyc 8124p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8124p Version-

Amd ≫ Epyc 8224pn Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8224pn Version-

Amd ≫ Epyc 8224p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8224p Version-

Amd ≫ Epyc 8324pn Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8324pn Version-

Amd ≫ Epyc 8324p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8324p Version-

Amd ≫ Epyc 8434pn Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8434pn Version-

Amd ≫ Epyc 8434p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8434p Version-

Amd ≫ Epyc 8534pn Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8534pn Version-

Amd ≫ Epyc 8534p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 8534p Version-

Amd ≫ Epyc 9734 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9734 Version-

Amd ≫ Epyc 9754s Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9754s Version-

Amd ≫ Epyc 9754 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9754 Version-

Amd ≫ Epyc 9184x Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9184x Version-

Amd ≫ Epyc 9384x Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9384x Version-

Amd ≫ Epyc 9684x Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9684x Version-

Amd ≫ Epyc 9124 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9124 Version-

Amd ≫ Epyc 9174f Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9174f Version-

Amd ≫ Epyc 9224 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9224 Version-

Amd ≫ Epyc 9254 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9254 Version-

Amd ≫ Epyc 9274f Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9274f Version-

Amd ≫ Epyc 9334 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9334 Version-

Amd ≫ Epyc 9354 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9354 Version-

Amd ≫ Epyc 9354p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9354p Version-

Amd ≫ Epyc 9374f Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9374f Version-

Amd ≫ Epyc 9454 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9454 Version-

Amd ≫ Epyc 9454p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9454p Version-

Amd ≫ Epyc 9474f Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9474f Version-

Amd ≫ Epyc 9534 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9534 Version-

Amd ≫ Epyc 9554 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9554 Version-

Amd ≫ Epyc 9554p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9554p Version-

Amd ≫ Epyc 9634 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9634 Version-

Amd ≫ Epyc 9654 Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9654 Version-

Amd ≫ Epyc 9654p Firmware Version < genoapi_1.0.0.c

Amd ≫ Epyc 9654p Version-

Amd ≫ Epyc Embedded 7313 Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7313 Version-

Amd ≫ Epyc Embedded 7313p Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7313p Version-

Amd ≫ Epyc Embedded 7413 Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7413 Version-

Amd ≫ Epyc Embedded 7443 Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7443 Version-

Amd ≫ Epyc Embedded 7443p Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7443p Version-

Amd ≫ Epyc Embedded 7543 Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7543 Version-

Amd ≫ Epyc Embedded 7543p Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7543p Version-

Amd ≫ Epyc Embedded 7643 Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7643 Version-

Amd ≫ Epyc Embedded 7713 Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7713 Version-

Amd ≫ Epyc Embedded 7713p Firmware Version < embmilanpi-sp3_1.0.0.9

Amd ≫ Epyc Embedded 7713p Version-

Amd ≫ Epyc Embedded 9124 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9124 Version-

Amd ≫ Epyc Embedded 9254 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9254 Version-

Amd ≫ Epyc Embedded 9354 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9354 Version-

Amd ≫ Epyc Embedded 9354p Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9354p Version-

Amd ≫ Epyc Embedded 9454 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9454 Version-

Amd ≫ Epyc Embedded 9454p Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9454p Version-

Amd ≫ Epyc Embedded 9534 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9534 Version-

Amd ≫ Epyc Embedded 9554 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9554 Version-

Amd ≫ Epyc Embedded 9554p Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9554p Version-

Amd ≫ Epyc Embedded 9654 Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9654 Version-

Amd ≫ Epyc Embedded 9654p Firmware Version < embgenoapi-sp5_1.0.0.7

Amd ≫ Epyc Embedded 9654p Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.93%	0.753

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6	1.5	4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
psirt@amd.com	6	1.5	4	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2023-31355

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-31355

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-31355

EUVD