CVE-2023-31347: Medium severity amd epyc 7773x firmware vulnerability
Published Feb 13, 2024
·Updated
Due to a code bug in SecureTSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.
Affected Software
124 affected components
All of the following
AMD Epyc 7773x Firmware<milanpi_1.0.0.c
AMD Epyc 7773x
All of the following
AMD Epyc 7763 Firmware<milanpi_1.0.0.c
AMD Epyc 7763
All of the following
AMD Epyc 7713 Firmware<milanpi_1.0.0.c
AMD Epyc 7713
All of the following
AMD Epyc 7713p Firmware
AMD Epyc 7713p
All of the following
AMD Epyc 7663 Firmware<milanpi_1.0.0.c
AMD Epyc 7663
All of the following
AMD Epyc 7663p Firmware<milanpi_1.0.0.c
AMD Epyc 7663p
All of the following
AMD Epyc 7643 Firmware<milanpi_1.0.0.c
AMD Epyc 7643
All of the following
AMD Epyc 7643p Firmware<milanpi_1.0.0.c
AMD Epyc 7643p
All of the following
AMD Epyc 7573x Firmware<milanpi_1.0.0.c
AMD Epyc 7573x
All of the following
AMD Epyc 75f3 Firmware<milanpi_1.0.0.c
AMD Epyc 75f3
All of the following
AMD Epyc 7543 Firmware<milanpi_1.0.0.c
AMD Epyc 7543
All of the following
AMD Epyc 7543p Firmware<milanpi_1.0.0.c
AMD Epyc 7543p
All of the following
AMD Epyc 7513 Firmware<milanpi_1.0.0.c
AMD Epyc 7513
All of the following
AMD Epyc 7453 Firmware<milanpi_1.0.0.c
AMD Epyc 7453
All of the following
AMD Epyc 7473x Firmware<milanpi_1.0.0.c
AMD Epyc 7473x
All of the following
AMD Epyc 74f3 Firmware<milanpi_1.0.0.c
AMD Epyc 74f3
All of the following
AMD Epyc 7443 Firmware<milanpi_1.0.0.c
AMD Epyc 7443
All of the following
AMD Epyc 7443p Firmware<milanpi_1.0.0.c
AMD Epyc 7443p
All of the following
AMD Epyc 7413 Firmware<milanpi_1.0.0.c
AMD Epyc 7413
All of the following
AMD Epyc 7373x Firmware<milanpi_1.0.0.c
AMD Epyc 7373x
All of the following
AMD Epyc 73f3 Firmware<milanpi_1.0.0.c
AMD Epyc 73f3
All of the following
AMD Epyc 7343 Firmware<milanpi_1.0.0.c
AMD Epyc 7343
All of the following
AMD Epyc 7313 Firmware<milanpi_1.0.0.c
AMD Epyc 7313
All of the following
AMD Epyc 7313p Firmware<milanpi_1.0.0.c
AMD Epyc 7313p
All of the following
AMD Epyc 7303 Firmware<milanpi_1.0.0.c
AMD Epyc 7303
All of the following
AMD Epyc 7303p Firmware<milanpi_1.0.0.c
AMD Epyc 7303p
All of the following
AMD Epyc 72f3 Firmware<milanpi_1.0.0.c
AMD Epyc 72f3
All of the following
AMD Epyc 7203 Firmware<milanpi_1.0.0.c
AMD Epyc 72f3
All of the following
AMD Epyc 7203p Firmware<milanpi_1.0.0.c
AMD Epyc 7203p
All of the following
AMD Epyc 8024p Firmware<genoapi_1.0.0.b
AMD Epyc 8024p
All of the following
AMD Epyc 8024pn Firmware<genoapi_1.0.0.b
AMD Epyc 8024pn
All of the following
AMD Epyc 8124p Firmware<genoapi_1.0.0.b
AMD Epyc 8124p
All of the following
AMD Epyc 8124pn Firmware<genoapi_1.0.0.b
AMD Epyc 8124pn
All of the following
AMD Epyc 8224p Firmware<genoapi_1.0.0.b
AMD Epyc 8224p
All of the following
AMD Epyc 8224pn Firmware<genoapi_1.0.0.b
AMD Epyc 8224pn
All of the following
AMD Epyc 8324p Firmware<genoapi_1.0.0.b
AMD Epyc 8324p
All of the following
AMD Epyc 8324pn Firmware<genoapi_1.0.0.b
AMD Epyc 8324pn
All of the following
AMD Epyc 8434p Firmware<genoapi_1.0.0.b
AMD Epyc 8434p
All of the following
AMD Epyc 8434pn Firmware<genoapi_1.0.0.b
AMD Epyc 8434pn
All of the following
AMD Epyc 8534p Firmware<genoapi_1.0.0.b
AMD Epyc 8534p
All of the following
AMD Epyc 8534pn Firmware<genoapi_1.0.0.b
AMD Epyc 8534pn
All of the following
AMD Epyc 9124 Firmware<genoapi_1.0.0.b
AMD Epyc 9124
All of the following
AMD Epyc 9224 Firmware<genoapi_1.0.0.b
AMD Epyc 9224
All of the following
AMD Epyc 9254 Firmware<genoapi_1.0.0.b
AMD Epyc 9254
All of the following
AMD Epyc 9334 Firmware<genoapi_1.0.0.b
AMD Epyc 9334
All of the following
AMD Epyc 9354 Firmware<genoapi_1.0.0.b
AMD Epyc 9354
All of the following
AMD Epyc 9354p Firmware<genoapi_1.0.0.b
AMD Epyc 9354p
All of the following
AMD Epyc 9174f Firmware<genoapi_1.0.0.b
AMD Epyc 9174f
All of the following
AMD Epyc 9184x Firmware<genoapi_1.0.0.b
AMD Epyc 9184x
All of the following
AMD Epyc 9274f Firmware<genoapi_1.0.0.b
AMD Epyc 9274f
All of the following
AMD Epyc 9374f Firmware<genoapi_1.0.0.b
AMD Epyc 9374f
All of the following
AMD Epyc 9384x Firmware<genoapi_1.0.0.b
AMD Epyc 9384x
All of the following
AMD Epyc 9474f Firmware<genoapi_1.0.0.b
AMD Epyc 9474f
All of the following
AMD Epyc 9454 Firmware<genoapi_1.0.0.b
AMD Epyc 9454
All of the following
AMD Epyc 9454p Firmware<genoapi_1.0.0.b
AMD Epyc 9454p
All of the following
AMD Epyc 9534 Firmware<genoapi_1.0.0.b
AMD Epyc 9534
All of the following
AMD Epyc 9554 Firmware<genoapi_1.0.0.b
AMD Epyc 9554
All of the following
AMD Epyc 9554p Firmware<genoapi_1.0.0.b
AMD Epyc 9554p
All of the following
AMD Epyc 9634 Firmware<genoapi_1.0.0.b
AMD Epyc 9634
All of the following
AMD Epyc 9654 Firmware<genoapi_1.0.0.b
AMD Epyc 9654
All of the following
AMD Epyc 9654p Firmware<genoapi_1.0.0.b
AMD Epyc 9654p
All of the following
AMD Epyc 9684x Firmware<genoapi_1.0.0.b
AMD Epyc 9684x
Event History
Feb 13, 2024
CVE Published
via MITRE·07:18 PM
Data Sourced
via MITRE·07:18 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-31347?
The severity of CVE-2023-31347 is categorized as high due to the potential for an attacker to compromise guest integrity.
2
How do I fix CVE-2023-31347?
To fix CVE-2023-31347, it is recommended to update the affected AMD EPYC firmware to a version beyond milanpi_1.0.0.c.
3
Which software is affected by CVE-2023-31347?
CVE-2023-31347 affects multiple AMD EPYC firmware versions, including 7773x, 7763, 7713, and others up to milanpi_1.0.0.c.
4
Who is vulnerable to CVE-2023-31347?
Organizations using AMD EPYC processors with Secure TSC enabled on firmware versions up to milanpi_1.0.0.c are vulnerable to CVE-2023-31347.
5
What are the potential impacts of CVE-2023-31347?
The potential impact of CVE-2023-31347 includes the loss of guest integrity due to incorrect TSC observations by the attacker.