CVE-2021-46744
published 2022-05-11CVE-2021-46744: An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
PriorityP428medium6.5CVSS 3.1
AVLACLPRLUINSCCHINAN
EPSS
0.33%
24.8th percentile
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| amd | amd_processors | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Trailofbits
Cloud cryptography demystified: Google Cloud Platform
blogs_trailofbits·2024-08-05
Cloud cryptography demystified: Google Cloud Platform
This post, the second in our series on cryptography in the cloud, provides an overview of the cloud cryptography services offered within Google Cloud Platform (GCP): when to use them, when not to use them, and important usage considerations. Stay tuned for future posts covering other cloud services.
At Trail of Bits, we frequently encounter products and services that use cloud providers’ cryptography offerings to satisfy their security goals. However, some cloud providers’ cryptography tools and services have opaque names or non-obvious use cases. This guide—informed by Trail of Bits’ extensive auditing experience—dives into the differences between these services and explains important considerations, helping you choose the right solution to enhance your project’s security.
## Introducti
Trailofbits
Cloud cryptography demystified: Google Cloud Platform
blogs_trailofbits·2024-08-05
Cloud cryptography demystified: Google Cloud Platform
This post, the second in our series on cryptography in the cloud, provides an overview of the cloud cryptography services offered within Google Cloud Platform (GCP): when to use them, when not to use them, and important usage considerations. Stay tuned for future posts covering other cloud services.
At Trail of Bits, we frequently encounter products and services that use cloud providers’ cryptography offerings to satisfy their security goals. However, some cloud providers’ cryptography tools and services have opaque names or non-obvious use cases. This guide—informed by Trail of Bits’ extensive auditing experience—dives into the differences between these services and explains important considerations, helping you choose the right solution to enhance your project’s security.
### Introduct
2022-05-11
Published