An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade wolfssl | Nov 4, 2022 | Aug 8, 2022 |
| Suse | — | Upgrade kernel-firmware-bluetoothUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-presteraUpgrade kernel-firmware-radeonUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-qcomUpgrade kernel-firmware-tiUpgrade kernel-firmwareUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-serialUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-networkUpgrade kernel-firmware-mediaUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-platformUpgrade kernel-firmware-i915Upgrade kernel-firmware-mellanoxUpgrade kernel-firmware-soundUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-brcmUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-nfpUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-marvellUpgrade kernel-firmware-allUpgrade kernel-firmware-atherosUpgrade kernel-firmware-ath11kUpgrade ucode-amdUpgrade kernel-firmware-intelUpgrade kernel-firmware-realtek | Oct 26, 2022 | May 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub