VulnerabilityModified

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

MEDIUM 5.5EPSS 11.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 11.3%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 11.32% probability · 96th percentile
CISA KEV: Not listed
Weakness: CWE-369
Affected: debian/debian linux · amd/epyc 7351p firmware · amd/epyc 7401p firmware · amd/epyc 7551p firmware · amd/epyc 7251 firmware · amd/epyc 7261 firmware · amd/epyc 7281 firmware · amd/epyc 7301 firmware · amd/epyc 7351 firmware · amd/epyc 7371 firmware · amd/epyc 7401 firmware · amd/epyc 7451 firmware · amd/epyc 7501 firmware · amd/epyc 7551 firmware · amd/epyc 7571 firmware · amd/epyc 7601 firmware · amd/ryzen 5 pro 3400g firmware · amd/ryzen 5 3400g firmware · amd/ryzen 5 pro 3400ge firmware · amd/ryzen 5 pro 3350g firmware · +27 more
Source: psirt@amd.com

References

http://www.openwall.com/lists/oss-security/2023/09/25/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/4Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/5Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/7Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/8Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/26/5Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/26/8Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/26/9Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/27/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/12Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/13Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/14Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/15Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/16Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/9Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/1Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/2Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/4Mailing List, Third Party Advisory
http://xenbits.xen.org/xsa/advisory-439.htmlThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/Mailing List
https://security.netapp.com/advisory/ntap-20240531-0005/
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007Vendor Advisory
https://www.debian.org/security/2023/dsa-5480Third Party Advisory
https://www.debian.org/security/2023/dsa-5492Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/4Mailing List, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.