CVE-2023-31355

MEDIUM Year: 2023
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-119
View all →

Vulnerability Description

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

Related Vulnerabilities

CVE-2016-4441

MEDIUM
CVSS:6.0(Medium)

The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of servic...

CWE-1192016

CVE-2016-4454

MEDIUM
CVSS:6.0(Medium)

The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) ...

CWE-1192016

CVE-2016-4509

MEDIUM
CVSS:6.0(Medium)

Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file.

CWE-1192016

CVE-2018-12213

MEDIUM
CVSS:6.0(Medium)

Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5...

CWE-1192018

CVE-2018-3610

MEDIUM
CVSS:6.0(Medium)

SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or...

CWE-1192018

CVE-2022-22558

MEDIUM
CVSS:6.0(Medium)

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potent...

CWE-1192022