Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-20584

Опубликовано: 13 авг. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.3

Описание

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

РелизСтатусПримечание
devel

not-affected

3.20240820.1ubuntu1
esm-infra-legacy/trusty

not-affected

AMD SEV firmware not present
esm-infra/bionic

not-affected

AMD SEV firmware not present
esm-infra/focal

not-affected

AMD SEV firmware not present
esm-infra/xenial

not-affected

AMD SEV firmware not present
focal

not-affected

AMD SEV firmware not present
jammy

not-affected

AMD SEV firmware not present
noble

released

3.20250311.1ubuntu0.24.04.1
oracular

released

3.20250311.1ubuntu0.24.10.1
plucky

not-affected

3.20240820.1ubuntu1

Показывать по

EPSS

Процентиль: 8%
0.00033
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
10 месяцев назад

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

CVSS3: 5.3
nvd
10 месяцев назад

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

CVSS3: 5.3
debian
10 месяцев назад

IOMMU improperly handles certain special address ranges with invalid d ...

CVSS3: 5.3
github
10 месяцев назад

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.

CVSS3: 5.3
fstec
10 месяцев назад

Уязвимость микрокода процессоров AMD64 Microcode, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 8%
0.00033
Низкий

5.3 Medium

CVSS3