Vulnerability · Published Feb 4, 2022 · Assigned by AMD
CVE-2020-12966
Medium 5.5
In plain English
A medium-severity security flaw in 1st/2nd/3rd Gen AMD EPYC™ Processors from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.3%top 75.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | 1st/2nd/3rd Gen AMD EPYC™ Processors | unspecified – before undefined |
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1013 x_refsource_MISC
- [oss-security] 20220808 wolfSSL 5.4.0 fixes CVE-2022-34293 and other issues mailing-list, x_refsource_MLIST