AMD-Prozessor: Mehrere Schwachstellen ermöglichen Manipulation von Daten und Offenlegung von Informationen

Summary

Product

Vulnerabilities 3

• High 7.9
  CVE-2024-21980 Public exploit

  Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a …

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 4th Gen AMD EPYC™ Processors
  Aug 5, 2024
• Medium 6.0
  CVE-2023-31355 Public exploit

  Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC …

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 4th Gen AMD EPYC™ Processors
  Aug 5, 2024
• Medium 6.0
  CVE-2024-21978 Public exploit

  Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially l…

  AMD 3rd Gen AMD EPYC™ Processors AMD EPYC™ Embedded 7003 4th Gen AMD EPYC™ Processors
  Aug 5, 2024

Revision history

1. 2025-03-12 #3

   Neue Updates von Fedora aufgenommen

2. 2024-08-13 #2

   Neue Updates von LENOVO aufgenommen

3. 2024-08-05 #1

   Initiale Fassung

References

• AMD Security Bulletin vom 2024-08-05
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html
• Dell Security Advisory DSA-2024-306 vom 2024-08-05
  https://www.dell.com/support/kbdoc/de-de/000227518/dsa-2024-306-security-update-for-dell-amd-based-poweredge-server-vulnerabilities
• Lenovo Security Advisory LEN-164067 vom 2024-08-14
  https://support.lenovo.com/us/en/product_security/LEN-164067
• Fedora Security Advisory FEDORA-2025-3110D5F423 vom 2025-03-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-3110d5f423
• Fedora Security Advisory FEDORA-2025-7F56EB37A0 vom 2025-03-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-7f56eb37a0
• Fedora Security Advisory FEDORA-2025-A5859C4A47 vom 2025-03-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-a5859c4a47