CVEvulnerability

CVE-2020-12967

7.2 HIGH Published 2021-05-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-05-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-77

Description

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

Affected configurations

• amd epyc 7232p • amd epyc 7251 • amd epyc 7252 • amd epyc 7261 • amd epyc 7262 • amd epyc 7272 • amd epyc 7281 • amd epyc 7282 • amd epyc 72f3 • amd epyc 7301 • amd epyc 7302 • amd epyc 7302p • amd epyc 7313 • amd epyc 7313p • amd epyc 7343 • amd epyc 7351 • amd epyc 7351p • amd epyc 7352 • amd epyc 7371 • amd epyc 73f3 • amd epyc 7401 • amd epyc 7401p • amd epyc 7402 • amd epyc 7402p • amd epyc 7413 • amd epyc 7443 • amd epyc 7443p • amd epyc 7451 • amd epyc 7452 • amd epyc 7453 • amd epyc 74f3 • amd epyc 7501 • amd epyc 7502 • amd epyc 7502p • amd epyc 7513 • amd epyc 7532 • amd epyc 7542 • amd epyc 7543 • amd epyc 7543p • amd epyc 7551 • amd epyc 7551p • amd epyc 7552 • amd epyc 75f3 • amd epyc 7601 • amd epyc 7642 • amd epyc 7643 • amd epyc 7662 • amd epyc 7663 • amd epyc 7702 • amd epyc 7702p • amd epyc 7713 • amd epyc 7713p • amd epyc 7742 • amd epyc 7763 • amd epyc 7f32 • amd epyc 7f52 • amd epyc 7f72 • amd epyc 7h12 • amd epyc embedded 3101 • amd epyc embedded 3151 … and 5 more

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References