VDB

CISA-2022-23814

CISA-2022-23814 PUBLISHED CVSS 5.3 MEDIUM

Reported by AMD · Published January 10, 2023

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confidential compute environment.

Risk Scores

CVSS 3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
AMD3rd Gen EPYCvarious
AMD3rd Gen EPYCvarious , various

Timeline

  • Jan 10, 2023 CVE Published
  • Apr 9, 2025 CVE Updated

References

  • vendor-advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›