Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 37

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00447 Published 2024-08-05 Fixed in MilanPI 1.0.0.D, GenoaPI 1.0.0.C +2 CWE-119
Priority LOW 37

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00493 Published 2024-08-05 Fixed in MilanPI 1.0.0.D, GenoaPI 1.0.0.C +2 CWE-20
Priority LOW 27

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00443 Published 2024-08-05 Fixed in MilanPI 1.0.0.D, GenoaPI 1.0.0.C +2 CWE-119