CVE-2020-12966

2022-02-0422:29:12

AMD

www.cve.org

amd

epyc

processors

sev-es

sev-snp

information disclosure

vulnerability

secure encrypted virtualization

encrypted state

secure nested paging

local attacker

exploitation

guest data

malicious hypervisor

AI Score

5.9

Confidence

High

EPSS

Percentile

5.1%

JSON

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.

CNA Affected

[
  {
    "product": "1st/2nd/3rd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "undefined",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]