Lucene search

[email protected]CVE-2021-46744

HistoryMay 11, 2022 - 5:15 p.m.

CVE-2021-46744

2022-05-1117:15:00

CWE-203

[email protected]

web.nvd.nist.gov

cve-2021-46744

attacker

hypervisor

sev

amd cpus

monitoring

ciphertext values

data inference

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.

CPENameOperatorVersion
amd:epyc_7001_firmwareamd epyc 7001 firmwareeq-
amd:epyc_7002_firmwareamd epyc 7002 firmwareeq-
amd:epyc_7003_firmwareamd epyc 7003 firmwareeq-
amd:epyc_7232p_firmwareamd epyc 7232p firmwareeq-
amd:epyc_7251_firmwareamd epyc 7251 firmwareeq-
amd:epyc_7252_firmwareamd epyc 7252 firmwareeq-
amd:epyc_7261_firmwareamd epyc 7261 firmwareeq-
amd:epyc_7262_firmwareamd epyc 7262 firmwareeq-
amd:epyc_7272_firmwareamd epyc 7272 firmwareeq-
amd:epyc_7281_firmwareamd epyc 7281 firmwareeq-

CPE	Name	Operator	Version
amd:epyc_7001_firmware	amd epyc 7001 firmware	eq	-
amd:epyc_7002_firmware	amd epyc 7002 firmware	eq	-
amd:epyc_7003_firmware	amd epyc 7003 firmware	eq	-
amd:epyc_7232p_firmware	amd epyc 7232p firmware	eq	-
amd:epyc_7251_firmware	amd epyc 7251 firmware	eq	-
amd:epyc_7252_firmware	amd epyc 7252 firmware	eq	-
amd:epyc_7261_firmware	amd epyc 7261 firmware	eq	-
amd:epyc_7262_firmware	amd epyc 7262 firmware	eq	-
amd:epyc_7272_firmware	amd epyc 7272 firmware	eq	-
amd:epyc_7281_firmware	amd epyc 7281 firmware	eq	-

Rows per page:

1-10 of 991

References

www.openwall.com/lists/oss-security/2022/08/08/6

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1033

Social References

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2021-46744

prion1 amd1 cvelist1 nessus1 freebsd1 openvas7