CVE-2021-46744: An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• amd epyc 7001 firmwareall versions
• amd epyc 7002 firmwareall versions
• amd epyc 7003 firmwareall versions
• amd epyc 7232p firmwareall versions
• amd epyc 7251 firmwareall versions
• amd epyc 7252 firmwareall versions
• amd epyc 7261 firmwareall versions
• amd epyc 7262 firmwareall versions
• amd epyc 7272 firmwareall versions
• amd epyc 7281 firmwareall versions
• amd epyc 7282 firmwareall versions
• amd epyc 7301 firmwareall versions
• amd epyc 7302 firmwareall versions
• amd epyc 7302p firmwareall versions
• amd epyc 7313 firmwareall versions
• amd epyc 7313p firmwareall versions
• amd epyc 7343 firmwareall versions
• amd epyc 7351 firmwareall versions
• amd epyc 7351p firmwareall versions
• amd epyc 7352 firmwareall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (AMD). Independent of NVD's CPE analysis and usually ahead of it.

• AMD AMD Processors

  • Processor EPYCaffected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2021-26340A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation
  33Monitor
• CVE-2021-46774Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, po
  30Monitor
• CVE-2020-12988A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system wh
  30Monitor

Published before and after this one in the same product

• Later →CVE-2021-26403Jan 11, 2023 · Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confide
  26Monitor
• Later →CVE-2021-26356May 9, 2023 · A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data c
  29Monitor
• Later →CVE-2023-20521Nov 14, 2023 · TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, po
  22Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.