NetSight
high7.2

CVE-2020-12967

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious ad…

Impact

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

Affected products

VendorProductAffected versions
AmdEpyc 7232p
All versions
AmdEpyc 7251
All versions
AmdEpyc 7252
All versions
AmdEpyc 7261
All versions
AmdEpyc 7262
All versions
AmdEpyc 7272
All versions
AmdEpyc 7281
All versions
AmdEpyc 7282
All versions
AmdEpyc 72f3
All versions
AmdEpyc 7301
All versions
AmdEpyc 7302
All versions
AmdEpyc 7302p
All versions

Weakness classification

References