Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3511 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3511-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Jochen Sprickerhof     July 31, 2023                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : amd64-microcode     Version        : 3.20230719.1+deb10u1     CVE ID         : CVE-2023-20593     Debian Bug     : 1041863

    Tavis Ormandy discovered that under specific microarchitectural     circumstances, a vector register in Zen 2 CPUs may not be written to 0     correctly. This flaw allows an attacker to leak register contents across     concurrent processes, hyper threads and virtualized guests.

    For details please refer to     https://lock.cmpxchg8b.com/zenbleed.html     https://github.com/google/security-research/security/advisories/GHSA-v6wh-rxpg-cmm8

    The initial microcode release by AMD only provides updates for second     generation EPYC CPUs: Various Ryzen CPUs are also affected, but no     updates are available yet. Fixes will be provided in a later update once     they are released.

    For more specific details and target dates please refer to the AMD     advisory at     https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html

    For Debian 10 buster, this problem has been fixed in version     3.20230719.1+deb10u1. Additionally the update contains a fix     for CVE-2019-9836.

    We recommend that you upgrade your amd64-microcode packages.

    For the detailed security status of amd64-microcode please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/amd64-microcode

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5459 advisory.

    Tavis Ormandy discovered that under specific microarchitectural circumstances, a vector register in Zen 2     CPUs may not be written to 0 correctly. This flaw allows an attacker to leak register contents across     concurrent processes, hyper threads and virtualized guests. For details please refer to     https://lock.cmpxchg8b.com/zenbleed.html https://github.com/google/security-     research/security/advisories/GHSA-v6wh-rxpg-cmm8 The initial microcode release by AMD only provides     updates for second generation EPYC CPUs: Various Ryzen CPUs are also affected, but no updates are     available yet. Fixes will be provided in a later update once they are released. For more specific details     and target dates please refer to the AMD advisory at https://www.amd.com/en/resources/product-     security/bulletin/amd-sb-7008.html For the oldstable distribution (bullseye), this problem has been fixed     in version 3.20230719.1~deb11u1. Additionally the update contains a fix for CVE-2019-9836. For the stable     distribution (bookworm), this problem has been fixed in version 3.20230719.1~deb12u1. We recommend that     you upgrade your amd64-microcode packages. For the detailed security status of amd64-microcode please     refer to its security tracker page at: https://security-tracker.debian.org/tracker/amd64-microcode

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for kernel-firmware fixes the following issues :

kernel-firmware was updated to version 20190618 :

  - cavium: Add firmware for CNN55XX crypto driver.

  - linux-firmware: Update firmware file for Intel Bluetooth     22161

  - linux-firmware: Update firmware file for Intel Bluetooth     9560

  - linux-firmware: Update firmware file for Intel Bluetooth     9260

  - linux-firmware: Update AMD SEV firmware (CVE-2019-9836,     bsc#1139383)

  - linux-firmware: update licence text for Marvell firmware

  - linux-firmware: update firmware for mhdp8546

  - linux-firmware: rsi: update firmware images for Redpine     9113 chipset

  - imx: sdma: update firmware to v3.5/v4.5

  - nvidia: update GP10[2467] SEC2 RTOS with the one already     used on GP108

  - linux-firmware: Update firmware file for Intel Bluetooth     8265

  - linux-firmware: Update firmware file for Intel Bluetooth     9260

  - linux-firmware: Update firmware file for Intel Bluetooth     9560

  - amlogic: add video decoder firmwares

  - iwlwifi: update -46 firmwares for 22260 and 9000 series

  - iwlwifi: add firmware for 22260 and update 9000 series
    -46 firmwares

  - iwlwifi: add -46.ucode firmwares for 9000 series

  - amdgpu: update vega20 to the latest 19.10 firmware

  - amdgpu: update vega12 to the latest 19.10 firmware

  - amdgpu: update vega10 to the latest 19.10 firmware

  - amdgpu: update polaris11 to the latest 19.10 firmware

  - amdgpu: update polaris10 to the latest 19.10 firmware

  - amdgpu: update raven2 to the latest 19.10 firmware

  - amdgpu: update raven to the latest 19.10 firmware

  - amdgpu: update picasso to the latest 19.10 firmware

  - linux-firmware: update fw for qat devices

  - Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122

  - drm/i915/firmware: Add ICL HuC v8.4.3238

  - drm/i915/firmware: Add ICL GuC v32.0.3

  - drm/i915/firmware: Add GLK HuC v03.01.2893

  - drm/i915/firmware: Add GLK GuC v32.0.3

  - drm/i915/firmware: Add KBL GuC v32.0.3

  - drm/i915/firmware: Add SKL GuC v32.0.3

  - drm/i915/firmware: Add BXT GuC v32.0.3

  - linux-firmware: Add firmware file for Intel Bluetooth     22161

  - cxgb4: update firmware to revision 1.23.4.0     (bsc#1136334)

  - linux-firmware: Update NXP Management Complex firmware     to version 10.14.3

  - linux-firmware: add firmware for MT7615E

  - mediatek: update MT8173 VPU firmware to v1.1.2 [decoder]     Enlarge struct vdec_pic_info to support more capture     buffer plane and capture buffer format change.

  - linux-firmware: update Marvell 8797/8997 firmware images

  - nfp: update Agilio SmartNIC flower firmware to rev     AOTC-2.10.A.23

This update was imported from the SUSE:SLE-15:Update update project.

ID	Name	Product	Family	Type	Severity
179074	Debian dla-3511 : amd64-microcode - security update	Nessus	Debian Local Security Checks	Local	critical
178916	Debian DSA-5459-1 : amd64-microcode - security update	Nessus	Debian Local Security Checks	Local	critical
126903	openSUSE Security Update : kernel-firmware (openSUSE-2019-1770)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2019-9836

medium

Tenable Plugins

critical

critical

medium