CVE-2019-9836

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 25-06-2019 11:15

Last modified: - 18-04-2022 07:17

Total changes: - 3

Description

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

5.3

Base score

3.9

1.4

Exploitability score

Impact score

Verification logic

AND

vendor=amd AND product=secure_encrypted_virtualization_firmware AND versionEndIncluding=0.17b11

vendor=amd AND product=epyc_7371 AND version=-

vendor=amd AND product=epyc_7401 AND version=-

vendor=amd AND product=epyc_7301 AND version=-

vendor=amd AND product=epyc_7351p AND version=-

vendor=amd AND product=epyc_7501 AND version=-

vendor=amd AND product=epyc_7551p AND version=-

vendor=amd AND product=epyc_7401p AND version=-

vendor=amd AND product=epyc_7451 AND version=-

vendor=amd AND product=epyc_7251 AND version=-

vendor=amd AND product=epyc_7261 AND version=-

vendor=amd AND product=epyc_7281 AND version=-

vendor=amd AND product=epyc_7351 AND version=-

vendor=amd AND product=epyc_7551 AND version=-

vendor=amd AND product=epyc_7601 AND version=-

vendor=opensuse AND product=leap AND version=15.0

vendor=opensuse AND product=leap AND version=15.1

Reference

Keywords

CVE-2019-9836

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2019-9836

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures