CVE-2019-9836
published 2019-06-25CVE-2019-9836: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and…
PriorityP426medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
1.61%
73.2th percentile
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| amd | secure_encrypted_virtualization_firmware | <= 0.17b11 | — |
| debian | amd64-microcode | < amd64-microcode 3.20220411.1 (bookworm) | amd64-microcode 3.20220411.1 (bookworm) |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.3MEDIUM
vendor_debian5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2019-9836: amd64-microcode - Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform S...
vendor_debian·2019·CVSS 5.3
CVE-2019-9836 [MEDIUM] CVE-2019-9836: amd64-microcode - Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform S...
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
Scope: local
bookworm: resolved (fixed in 3.20220411.1)
bullseye: resolved (fixed in 3.20230719.1~deb11u1)
forky: resolved (fixed in 3.20220411.1)
sid: resolved (fixed in 3.20220411.1)
trixie: resolved (fixed in 3.20220411.1)
GHSA
GHSA-mmcw-j5qf-fj6c: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0
ghsa_unreviewed·2022-05-24
CVE-2019-9836 [MEDIUM] CWE-327 GHSA-mmcw-j5qf-fj6c: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
OSV
CVE-2019-9836: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0
osv·2019-06-25·CVSS 5.3
CVE-2019-9836 [MEDIUM] CVE-2019-9836: Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00032.htmlhttp://packetstormsecurity.com/files/153436/AMD-Secure-Encrypted-Virtualization-SEV-Key-Recovery.htmlhttps://seclists.org/fulldisclosure/2019/Jun/46https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03943en_ushttps://www.amd.com/en/corporate/product-securityhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00032.htmlhttp://packetstormsecurity.com/files/153436/AMD-Secure-Encrypted-Virtualization-SEV-Key-Recovery.htmlhttps://seclists.org/fulldisclosure/2019/Jun/46https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03943en_ushttps://www.amd.com/en/corporate/product-security
2019-06-25
Published