CVE-2023-31347

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is…

Medium · published February 13, 2024

CVSS v3.1
4.9
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

Due to a code bug in

Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a

guest to observe an incorrect TSC when Secure TSC is enabled potentially

resulting in a loss of guest integrity.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Published
2024-02-13T19:18Z
EPSS history
Timeline
  • 13 FEB 19:18Z
    Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is…
    cvelistv5