PT-2023-8273 · Amd+1 · Amd Snp Guest Context Page Handler+1

Published 2023-11-14 · Updated 2024-07-09 · CVE-2023-20519

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AMD SNP Guest Context Page Handler (affected versions not specified)

Description A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent, resulting in a potential loss of guest integrity. The vulnerability is related to the use of memory after it has been freed, which could allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-00343

CVE-2023-20519

SUSE-SU-2023:4654-1

SUSE-SU-2023:4655-1

SUSE-SU-2023:4660-1

SUSE-SU-2023:4664-1

SUSE-SU-2023:4665-1

SUSE-SU-2024:2376-1

Affected Products

Amd Snp Guest Context Page Handler

Suse

References · 30

• https://osv.dev/vulnerability/SUSE-SU-2023:4655-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2376-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4665-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4654-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20519 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4664-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4660-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20519 · Security Note
• https://bdu.fstec.ru/vul/2024-00343 · Security Note
• https://suse.com/security/cve/CVE-2021-46766 · Note
• https://suse.com/security/cve/CVE-2023-20519 · Note
• https://suse.com/security/cve/CVE-2023-20526 · Note
• https://suse.com/security/cve/CVE-2022-23820 · Note
• https://suse.com/support/update/announcement/2023/suse-su-20234655-1 · Note