ByteOS Network

NVD Vulnerability Details :

CVE-2019-9836

Analyzed

Source-cve@mitre.org

Published At-25 Jun, 2019 | 21:15

Updated At-18 Apr, 2022 | 17:17

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Advanced Micro Devices, Inc.

>>secure_encrypted_virtualization_firmware>>Versions up to 0.17b11(inclusive)

cpe:2.3:o:amd:secure_encrypted_virtualization_firmware:*:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7251>>-

cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7261>>-

cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7281>>-

cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7301>>-

cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7351>>-

cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7351p>>-

cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7371>>-

cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7401>>-

cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7401p>>-

cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7451>>-

cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7501>>-

cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7551>>-

cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7551p>>-

cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:*

Advanced Micro Devices, Inc.

>>epyc_7601>>-

cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:*

openSUSE

>>leap>>15.0

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

openSUSE

>>leap>>15.1

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-327	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00032.html	cve@mitre.org	Mailing List Third Party Advisory
http://packetstormsecurity.com/files/153436/AMD-Secure-Encrypted-Virtualization-SEV-Key-Recovery.html	cve@mitre.org	Third Party Advisory VDB Entry
https://seclists.org/fulldisclosure/2019/Jun/46	cve@mitre.org	Mailing List Third Party Advisory
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03943en_us	cve@mitre.org	Third Party Advisory
https://www.amd.com/en/corporate/product-security	cve@mitre.org	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History