← CVE Intelligence

CVE-2023-20585

AMD / AMD EPYC™ 7003 Series Processors PUBLISHED

Description (CNA)

Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds condition without RMP checks, resulting in a potential loss of confidential guest integrity.

Affected (CNA)

Vendor / productVersions
AMD / AMD EPYC™ 7003 Series Processorsunaffected SEV FW 1.37.23
AMD / AMD EPYC™ 9004 Series Processorsunaffected SEV FW 1.37.31
AMD / AMD EPYC™ Embedded 7003 Series Processorsunaffected EmbMilanPI-SP3 1.0.0.B
AMD / AMD EPYC™ Embedded 9004 Series Processorsunaffected EmbGenoaPI-1.0.0.A

CWE

CWE-788

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.