Lucene search

[email protected]CVE-2023-20566

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-20566

2023-11-1419:15:15

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve

2023

20566

improper address validation

asp

snp

guest memory integrity

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0005 Low

EPSS

Percentile

16.8%

JSON

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.

CPENameOperatorVersion
amd:epyc_7763_firmwareamd epyc 7763 firmwareltmilanpi_1.0.0.b
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi-sp3_1.0.0.7
amd:epyc_7763_firmwareamd epyc 7763 firmwareeq-
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi-sp3_1.0.0.5
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi_1.0.0.a
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi-sp3_1.0.0.4
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi_1.0.0.3
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi_1.0.0.9
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi_1.0.0.4
amd:epyc_7763_firmwareamd epyc 7763 firmwareeqmilanpi_1.0.0.8

CPE	Name	Operator	Version
amd:epyc_7763_firmware	amd epyc 7763 firmware	lt	milanpi_1.0.0.b
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi-sp3_1.0.0.7
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	-
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi-sp3_1.0.0.5
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi_1.0.0.a
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi-sp3_1.0.0.4
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi_1.0.0.3
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi_1.0.0.9
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi_1.0.0.4
amd:epyc_7763_firmware	amd epyc 7763 firmware	eq	milanpi_1.0.0.8

Rows per page:

1-10 of 131

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5.3 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0005 Low

EPSS

Percentile

16.8%

JSON

Related for CVE-2023-20566

prion1 cvelist1 nessus2 amd2 openvas3