> CVE-2024-21978 [MEDIUM]

« BACK_TO_HOME
PUBLISHED
2024-08-05 16:15
MODIFIED
2024-11-26 19:13
CVSS_SCORE V3
6.0
EPSS (Prob. Exploit)
0.49%
Top 57.4%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

> AFFECTED_PRODUCTS

AMD - Epyc 72f3 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7313 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7313p Firmware
< milanpi_1.0.0.d
AMD - Epyc 7343 Firmware
< milanpi_1.0.0.d
AMD - Epyc 73f3 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7413 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7443 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7443p Firmware
< milanpi_1.0.0.d
AMD - Epyc 7453 Firmware
< milanpi_1.0.0.d
AMD - Epyc 74f3 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7513 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7543 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7543p Firmware
< milanpi_1.0.0.d
AMD - Epyc 75f3 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7643 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7663 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7713 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7713p Firmware
< milanpi_1.0.0.d
AMD - Epyc 7763 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7773x Firmware
< milanpi_1.0.0.d
AMD - Epyc 7473x Firmware
< milanpi_1.0.0.d
AMD - Epyc 7573x Firmware
< milanpi_1.0.0.d
AMD - Epyc 7373x Firmware
< milanpi_1.0.0.d
AMD - Epyc 7203 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7203p Firmware
< milanpi_1.0.0.d
AMD - Epyc 7303 Firmware
< milanpi_1.0.0.d
AMD - Epyc 7303p Firmware
< milanpi_1.0.0.d
AMD - Epyc 7643p Firmware
< milanpi_1.0.0.d
AMD - Epyc 7663p Firmware
< milanpi_1.0.0.d
AMD - Epyc 8024pn Firmware
< genoapi_1.0.0.c
AMD - Epyc 8024p Firmware
< genoapi_1.0.0.c
AMD - Epyc 8124pn Firmware
< genoapi_1.0.0.c
AMD - Epyc 8124p Firmware
< genoapi_1.0.0.c
AMD - Epyc 8224pn Firmware
< genoapi_1.0.0.c
AMD - Epyc 8224p Firmware
< genoapi_1.0.0.c
AMD - Epyc 8324pn Firmware
< genoapi_1.0.0.c
AMD - Epyc 8324p Firmware
< genoapi_1.0.0.c
AMD - Epyc 8434pn Firmware
< genoapi_1.0.0.c
AMD - Epyc 8434p Firmware
< genoapi_1.0.0.c
AMD - Epyc 8534pn Firmware
< genoapi_1.0.0.c
AMD - Epyc 8534p Firmware
< genoapi_1.0.0.c
AMD - Epyc 9734 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9754s Firmware
< genoapi_1.0.0.c
AMD - Epyc 9754 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9184x Firmware
< genoapi_1.0.0.c
AMD - Epyc 9384x Firmware
< genoapi_1.0.0.c
AMD - Epyc 9684x Firmware
< genoapi_1.0.0.c
AMD - Epyc 9124 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9174f Firmware
< genoapi_1.0.0.c
AMD - Epyc 9224 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9254 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9274f Firmware
< genoapi_1.0.0.c
AMD - Epyc 9334 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9354 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9354p Firmware
< genoapi_1.0.0.c
AMD - Epyc 9374f Firmware
< genoapi_1.0.0.c
AMD - Epyc 9454 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9454p Firmware
< genoapi_1.0.0.c
AMD - Epyc 9474f Firmware
< genoapi_1.0.0.c
AMD - Epyc 9534 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9554 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9554p Firmware
< genoapi_1.0.0.c
AMD - Epyc 9634 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9654 Firmware
< genoapi_1.0.0.c
AMD - Epyc 9654p Firmware
< genoapi_1.0.0.c
AMD - Epyc Embedded 7313 Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7313p Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7413 Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7443 Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7443p Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7543 Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7543p Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7643 Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7713 Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 7713p Firmware
< embmilanpi-sp3_1.0.0.9
AMD - Epyc Embedded 9124 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9254 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9354 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9354p Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9454 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9454p Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9534 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9554 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9554p Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9654 Firmware
< embgenoapi-sp5_1.0.0.7
AMD - Epyc Embedded 9654p Firmware
< embgenoapi-sp5_1.0.0.7

> CVSS V3 METRICS

CVSS_VECTOR
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

> MÉTRIQUES CVSS DÉTAILLÉES

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Métrique Valeur Interprétation
AV (Vecteur d'Attaque)
Attack Vector
Local (L)
Exploit nécessite un accès local au système
AC (Complexité d'Attaque)
Attack Complexity
Low (L)
Peu de conditions requises pour exploiter
PR (Privilèges Requis)
Privileges Required
High (H)
Authentifié avec privilèges administratifs
UI (Interaction Utilisateur)
User Interaction
None (N)
Aucune interaction utilisateur nécessaire
S (Périmètre)
Scope
Unchanged (U)
Impact reste dans le périmètre du composant compromis
C (Impact Confidentialité)
Confidentiality Impact
High (H)
Divulgation totale d'informations
I (Impact Intégrité)
Integrity Impact
High (H)
Modification totale des données possible
A (Impact Disponibilité)
Availability Impact
None (N)
Aucune interruption de service

> RÉSUMÉ DES IMPACTS

Confidentialité
High
Divulgation totale d'informations
Intégrité
High
Modification totale des données possible
Disponibilité
None
Aucune interruption de service

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/08/2024 16:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:53
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME