CVE-2023-31355 | THREATINT

Assigner	AMD
Reserved	2023-04-27
Published	2024-08-05
Updated	2024-08-06

Description

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

MEDIUM: 6.0

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Problem types

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Product status

Default status

0x400363e090

various before MilanPI 1.0.0.D

affected

Default status

0x400363e0e0

various before GenoaPI 1.0.0.C

affected

Default status

0x400363e130

various before EmbMilanPI-SP3 1.0.0.9

affected

Default status

0x400363e180

various before EmbGenoaPI-SP5 1.0.0.7

affected

References

https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html vendor-advisory

cve.org CVE-2023-31355

nvd.nist.gov CVE-2023-31355

Download JSON

https://cve.threatint.com/CVE/CVE-2023-31355

Subscribe to our newsletter to learn more about our work.