CVE & CISA-KEV Catalog

CVE-2023-31355

MEDIUM
6.0
CVSS v3
NVD

Description

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

CWE-119Buffer OverflowCWE-787Out-of-bounds Write

How to fix

Remediation Available
epyc 7203 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7203p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 72f3 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7303 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7303p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7313 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7313p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7343 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7373x firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 73f3 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7413 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7443 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7443p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7453 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7473x firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 74f3 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7513 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7543 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7543p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7573x firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 75f3 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7643 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7643p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7663 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7663p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7713 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7713p firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7763 firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 7773x firmwareNVD
Affected:< milanpi_1.0.0.dFixed in:milanpi_1.0.0.dCVE-2023-31355derived from NVD
epyc 8024p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8024pn firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8124p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8124pn firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8224p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8224pn firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8324p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8324pn firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8434p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8434pn firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8534p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 8534pn firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9124 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9174f firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9184x firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9224 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9254 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9274f firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9334 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9354 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9354p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9374f firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9384x firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9454 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9454p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9474f firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9534 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9554 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9554p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9634 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9654 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9654p firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9684x firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9734 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9754 firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc 9754s firmwareNVD
Affected:< genoapi_1.0.0.cFixed in:genoapi_1.0.0.cCVE-2023-31355derived from NVD
epyc embedded 7313 firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7313p firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7413 firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7443 firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7443p firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7543 firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7543p firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7643 firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7713 firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 7713p firmwareNVD
Affected:< embmilanpi-sp3_1.0.0.9Fixed in:embmilanpi-sp3_1.0.0.9CVE-2023-31355derived from NVD
epyc embedded 9124 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9254 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9354 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9354p firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9454 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9454p firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9534 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9554 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9554p firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9654 firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD
epyc embedded 9654p firmwareNVD
Affected:< embgenoapi-sp5_1.0.0.7Fixed in:embgenoapi-sp5_1.0.0.7CVE-2023-31355derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeChanged

Impact

ConfidentialityHigh
IntegrityNone
AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Exploit Intelligence

0.44%probability of exploitation in 30 days
36thpercentile

Low risk: more likely to be exploited than 36% of all known CVEs.

References

Other references1

Related Vulnerabilities

Other CWE-119 (Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2023-4966Critical9.4100%KEV + RansomFix
CVE-2017-11882High7.8100%KEV + Ransom-
CVE-2020-0796Critical10.0100%KEV + Ransom-
CVE-2008-4250Critical9.899%KEV-
CVE-2017-15944Critical9.898%KEVFix
CVE-2015-0014High10.097%--
Embed a live status badge for CVE-2023-31355
CVE-2023-31355 severity badge

Markdown

[![CVE-2023-31355](https://tridentstack.com/cve/badge/CVE-2023-31355.svg)](https://tridentstack.com/cve/CVE-2023-31355)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-31355"><img src="https://tridentstack.com/cve/badge/CVE-2023-31355.svg" alt="CVE-2023-31355"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-26.