PT-2024-1555 · Amd · Amd Sev-Snp

Tom Dohrmann · Published 2024-01-09 · Updated 2025-06-20 · CVE-2023-20573

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AMD SEV-SNP (affected versions not specified)

Description A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests, potentially resulting in guests not receiving expected debug information. The issue is related to the implementation of the SEV-SNP (Secure Nested Paging) protective mechanism for virtual machines running on servers with AMD processors, and is associated with incorrect clearance or release of resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Protection Mechanism Failure

Improper Resource Release

Weakness Enumeration

CWE-693

CWE-404

Related Identifiers

BDU:2024-01100

CVE-2023-20573

Affected Products

Amd Sev-Snp

References · 12

• 🔥 https://github.com/Freax13/cve-2023-20573-poc · Exploit
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3006 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01100 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20573 · Security Note
• https://twitter.com/VulmonFeeds/status/1745466940007604572 · Twitter Post
• https://t.me/cvenotify/126285 · Telegram Post
• https://t.me/cybersecuritytechnologies/9765 · Telegram Post
• https://twitter.com/PentestingN/status/1745505837613744382 · Twitter Post
• https://twitter.com/CVEnew/status/1745467918396137962 · Twitter Post
• https://twitter.com/TheHackForce/status/1745332074909684126 · Twitter Post
• https://t.me/cvenotify/67074 · Telegram Post
• https://twitter.com/ksg93rd/status/1745439244603056626 · Twitter Post