CVE-2020-12967: vulnerability in AMD SEV/SEV-ES
AMD Secure Encrypted Virtualization
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
AMD's SEV/SEV-ES encryption feature lacks proper protection for nested page tables, allowing a malicious server administrator to run arbitrary code inside encrypted virtual machines. This undermines the security guarantee that VMs should be isolated from the hypervisor.
CVE-2020-12967 affects AMD SEV/SEV-ES by failing to protect nested page table (NPT) structures, enabling a hypervisor-level threat actor to inject code into guest VMs despite encryption. The attack requires administrator access to the hypervisor and compromises guest VM integrity and confidentiality through memory manipulation.
In the same product, most dangerous first.