CVE-2020-12966: Infoleak
Published Feb 4, 2022
·Updated
AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). A local authenticated attacker could potentially exploit this vulnerability leading to leaking guest data by the malicious hypervisor.
Affected Software
214 affected components
AMD Epyc 7763 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7763
AMD Epyc 7713p Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7713p
AMD Epyc 7713 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7713
AMD Epyc 7663 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7663
AMD Epyc 7643 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7643
AMD Epyc 75f3 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 75f3
AMD Epyc 7543p Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7543p
AMD Epyc 7543 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7543
AMD Epyc 7513 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7513
AMD Epyc 74f3 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 74f3
AMD Epyc 7453 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7453
AMD Epyc 7443p Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7443p
AMD Epyc 7443 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7443
AMD Epyc 7413 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7413
AMD Epyc 73f3 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 73f3
AMD Epyc 7343 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7343
AMD Epyc 7313p Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7313p
AMD Epyc 7313 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7313
AMD Epyc 72f3 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 72f3
AMD Epyc 7003 Firmware<milanpi-sp3_1.0.0.5
AMD Epyc 7003
AMD Epyc 7001 Firmware
AMD Epyc 7001
AMD Epyc 7002 Firmware
AMD Epyc 7002
AMD Epyc 7232p Firmware
AMD Epyc 7232p
AMD Epyc 7251 Firmware
AMD Epyc 7251
AMD Epyc 7252 Firmware
AMD Epyc 7252
AMD Epyc 7261 Firmware
AMD Epyc 7261
AMD Epyc 7262 Firmware
AMD Epyc 7262
AMD Epyc 7272 Firmware
AMD Epyc 7272
AMD Epyc 7281 Firmware
AMD Epyc 7281
AMD Epyc 7282 Firmware
AMD Epyc 7282
AMD Epyc 7301 Firmware
AMD Epyc 7301
AMD Epyc 7302 Firmware
AMD Epyc 7302
AMD Epyc 7302p Firmware
AMD Epyc 7302p
AMD Epyc 7351 Firmware
AMD Epyc 7351
AMD Epyc 7351p Firmware
AMD Epyc 7351p
AMD Epyc 7352 Firmware
AMD Epyc 7352
AMD Epyc 7371 Firmware
AMD Epyc 7371
AMD Epyc 7401 Firmware
AMD Epyc 7401
AMD Epyc 7401p Firmware
AMD Epyc 7401p
AMD Epyc 7402 Firmware
AMD Epyc 7402
AMD Epyc 7402p Firmware
AMD Epyc 7402p
AMD Epyc 7451 Firmware
AMD Epyc 7451
AMD Epyc 7452 Firmware
AMD Epyc 7452
AMD Epyc 7501 Firmware
AMD Epyc 7501
AMD Epyc 7502 Firmware
AMD Epyc 7502
AMD Epyc 7502p Firmware
AMD Epyc 7502p
AMD Epyc 7532 Firmware
AMD Epyc 7532
AMD Epyc 7542 Firmware
AMD Epyc 7542
AMD Epyc 7551 Firmware
AMD Epyc 7551
AMD Epyc 7551p Firmware
AMD Epyc 7551p
AMD Epyc 7552 Firmware
AMD Epyc 7552
AMD Epyc 7601 Firmware
AMD Epyc 7601
AMD Epyc 7642 Firmware
AMD Epyc 7642
AMD Epyc 7662 Firmware
AMD Epyc 7662
AMD Epyc 7702 Firmware
AMD Epyc 7702
AMD Epyc 7702p Firmware
AMD Epyc 7702p
AMD Epyc 7742 Firmware
AMD Epyc 7742
AMD Epyc 7f32 Firmware
AMD Epyc 7f32
AMD Epyc 7f52 Firmware
AMD Epyc 7f52
AMD Epyc 7f72 Firmware
AMD Epyc 7f72
AMD Epyc 7h12 Firmware
AMD Epyc 7h12
AMD Epyc Embedded 3101 Firmware
AMD Epyc Embedded 3101
AMD Epyc Embedded 3151 Firmware
AMD Epyc Embedded 3151
AMD Epyc Embedded 3201 Firmware
AMD Epyc Embedded 3201
AMD Epyc Embedded 3251 Firmware
AMD Epyc Embedded 3251
AMD Epyc Embedded 3255 Firmware
AMD Epyc Embedded 3255
AMD Epyc Embedded 3351 Firmware
AMD Epyc Embedded 3351
AMD Epyc Embedded 3451 Firmware
AMD Epyc Embedded 3451
AMD Epyc Embedded 7232p Firmware
AMD Epyc Embedded 7232p
AMD Epyc Embedded 7251 Firmware
AMD Epyc Embedded 7251
AMD Epyc Embedded 7252 Firmware
AMD Epyc Embedded 7252
AMD Epyc Embedded 7261 Firmware
AMD Epyc Embedded 7261
AMD Epyc Embedded 7262 Firmware
AMD Epyc Embedded 7262
AMD Epyc Embedded 7272 Firmware
AMD Epyc Embedded 7272
AMD Epyc Embedded 7281 Firmware
AMD Epyc Embedded 7281
AMD Epyc Embedded 7282 Firmware
AMD Epyc Embedded 7282
AMD Epyc Embedded 7301 Firmware
AMD Epyc Embedded 7301
AMD Epyc Embedded 7302 Firmware
AMD Epyc Embedded 7302
AMD Epyc Embedded 7302p Firmware
AMD Epyc Embedded 7302p
AMD Epyc Embedded 7351 Firmware
AMD Epyc Embedded 7351
AMD Epyc Embedded 7352 Firmware
AMD Epyc Embedded 7352
AMD Epyc Embedded 735p Firmware
AMD Epyc Embedded 735p
AMD Epyc Embedded 7371 Firmware
AMD Epyc Embedded 7371
AMD Epyc Embedded 7401 Firmware
AMD Epyc Embedded 7401
AMD Epyc Embedded 7402 Firmware
AMD Epyc Embedded 7402
AMD Epyc Embedded 7402p Firmware
AMD Epyc Embedded 7402p
AMD Epyc Embedded 740p Firmware
AMD Epyc Embedded 740p
AMD Epyc Embedded 7451 Firmware
AMD Epyc Embedded 7451
AMD Epyc Embedded 7452 Firmware
AMD Epyc Embedded 7452
AMD Epyc Embedded 7501 Firmware
AMD Epyc Embedded 7501
AMD Epyc Embedded 7502 Firmware
AMD Epyc Embedded 7502
AMD Epyc Embedded 7502p Firmware
AMD Epyc Embedded 7502p
AMD Epyc Embedded 7532 Firmware
AMD Epyc Embedded 7532
AMD Epyc Embedded 7542 Firmware
AMD Epyc Embedded 7542
AMD Epyc Embedded 7551 Firmware
AMD Epyc Embedded 7551
AMD Epyc Embedded 7552 Firmware
AMD Epyc Embedded 7552
AMD Epyc Embedded 755p Firmware
AMD Epyc Embedded 755p
AMD Epyc Embedded 7601 Firmware
AMD Epyc Embedded 7601
AMD Epyc Embedded 7642 Firmware
AMD Epyc Embedded 7642
AMD Epyc Embedded 7662 Firmware
AMD Epyc Embedded 7662
AMD Epyc Embedded 7702 Firmware
AMD Epyc Embedded 7702
AMD Epyc Embedded 7702p Firmware
AMD Epyc Embedded 7702p
AMD Epyc Embedded 7742 Firmware
AMD Epyc Embedded 7742
AMD Epyc Embedded 7f32 Firmware
AMD Epyc Embedded 7f32
AMD Epyc Embedded 7f52 Firmware
AMD Epyc Embedded 7f52
AMD Epyc Embedded 7f72 Firmware
AMD Epyc Embedded 7f72
AMD Epyc Embedded 7h12 Firmware
AMD Epyc Embedded 7h12
Event History
Feb 4, 2022
CVE Published
via MITRE·10:29 PM
Data Sourced
via MITRE·10:29 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-12966?
CVE-2020-12966 is classified as a medium severity information disclosure vulnerability in AMD EPYC processors.
2
How do I fix CVE-2020-12966?
To fix CVE-2020-12966, update the firmware to versions later than milanpi-sp3_1.0.0.5 for affected AMD EPYC processors.
3
Who is affected by CVE-2020-12966?
CVE-2020-12966 affects AMD EPYC processors utilizing Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Nested Paging (SEV-SNP).
4
What could an attacker do with CVE-2020-12966?
A local authenticated attacker could potentially exploit CVE-2020-12966 to disclose sensitive information within the secure environment of the AMD EPYC processor.
5
When was CVE-2020-12966 disclosed?
CVE-2020-12966 was disclosed on August 8, 2022, in a forum on OSS Security.