medium6.0
CVE-2023-31355
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of mem…
Impact
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7203 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7203p Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 72f3 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7303 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7303p Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7313 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7313p Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7343 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 73f3 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7373x Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7413 Firmware | before milanpi_1.0.0.d |
| Amd | Epyc 7443 Firmware | before milanpi_1.0.0.d |