Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-31356

Опубликовано: 13 авг. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.4

Описание

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.

РелизСтатусПримечание
devel

not-affected

3.20240820.1ubuntu1
esm-infra-legacy/trusty

not-affected

AMD SEV firmware not present
esm-infra/bionic

not-affected

AMD SEV firmware not present
esm-infra/focal

not-affected

AMD SEV firmware not present
esm-infra/xenial

not-affected

AMD SEV firmware not present
focal

not-affected

AMD SEV firmware not present
jammy

not-affected

AMD SEV firmware not present
noble

released

3.20250311.1ubuntu0.24.04.1
oracular

released

3.20250311.1ubuntu0.24.10.1
plucky

not-affected

3.20240820.1ubuntu1

Показывать по

EPSS

Процентиль: 11%
0.00037
Низкий

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.4
redhat
больше 1 года назад

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.

CVSS3: 4.4
nvd
около 1 года назад

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.

CVSS3: 4.4
debian
около 1 года назад

Incomplete system memory cleanup in SEV firmware could allow a privile ...

CVSS3: 4.4
github
около 1 года назад

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.

CVSS3: 4.4
fstec
больше 1 года назад

Уязвимость в прошивке SEV микропрограммного обеспечения графических процессоров AMD, связанная с неполной очисткой временных или вспомогательных ресурсов, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 11%
0.00037
Низкий

4.4 Medium

CVSS3