cbcvebase.
CVE-2020-12966
published 2022-02-04

CVE-2020-12966: AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted…

medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

Affected

21 ranges
VendorProductVersion rangeFixed in
amd1st_2nd_3rd_gen_amd_epyc_processors>= unspecified < undefinedundefined
amdepyc_7003_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_72f3_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7313_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7313p_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7343_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_73f3_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7413_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7443_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7443p_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7453_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_74f3_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7513_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7543_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7543p_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_75f3_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7643_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7663_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7713_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7713p_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5
amdepyc_7763_firmware< milanpi-sp3_1.0.0.5milanpi-sp3_1.0.0.5