PT-2023-12740 · Suse · Suse

Benjamin Serebrin · Publicado 2023-11-14 · Atualizado 2024-07-09 · CVE-2022-23830

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue concerns a potential limited loss of guest memory integrity due to SMM configuration not being immutable as intended when SNP is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2022-23830

SUSE-SU-2023:4654-1

SUSE-SU-2023:4655-1

SUSE-SU-2023:4660-1

SUSE-SU-2023:4664-1

SUSE-SU-2023:4665-1

SUSE-SU-2024:2376-1

Produtos afetados

Suse

Referências · 32

• https://suse.com/security/cve/CVE-2021-46766 · Nota
• https://suse.com/security/cve/CVE-2023-20519 · Nota
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2023:4655-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-20526 · Nota
• https://suse.com/security/cve/CVE-2022-23820 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2024:2376-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20234655-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2023:4665-1 · Aviso do Fabricante
• https://t.me/cvenotify/83679 · Publicação no Telegram
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20234664-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2023:4654-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20234654-1 · Nota
• https://t.me/cvenotify/61035 · Publicação no Telegram