Vulnerabilities

TI-2023-15007 CVE-2023-31347 · GHSA-ggv6-7vfj-r2fw

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges…

LOW 23

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0046 Published 2024-02-13 No fix listed CWE-682

TI-2023-15006 CVE-2023-31346 · GHSA-rvmr-97cf-9f3m

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

LOW 27

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00309 Published 2024-02-13 Partial fix CWE-284

Vulnerabilities

Filters

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges…

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.