VulnerabilityModified
CVE-2023-20588
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
MEDIUM 5.5EPSS 11.2%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 11.15% probability · 96th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-369
- Affected
- debian/debian linux · amd/epyc 7351p firmware · amd/epyc 7401p firmware · amd/epyc 7551p firmware · amd/epyc 7251 firmware · amd/epyc 7261 firmware · amd/epyc 7281 firmware · amd/epyc 7301 firmware · amd/epyc 7351 firmware · amd/epyc 7371 firmware · amd/epyc 7401 firmware · amd/epyc 7451 firmware · amd/epyc 7501 firmware · amd/epyc 7551 firmware · amd/epyc 7571 firmware · amd/epyc 7601 firmware · amd/ryzen 5 pro 3400g firmware · amd/ryzen 5 3400g firmware · amd/ryzen 5 pro 3400ge firmware · amd/ryzen 5 pro 3350g firmware · +27 more
- Source
- psirt@amd.com
EPSS 11.2% since 3 November 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://www.openwall.com/lists/oss-security/2023/09/25/3Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/25/4Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/25/5Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/25/7Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/25/8Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/26/5Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/26/8Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/26/9Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/27/1Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/03/12Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/03/13Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/03/14Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/03/15Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/03/16Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/03/9Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/04/1Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/04/2Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/04/3Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/10/04/4Mailing List, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-439.htmlThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/Mailing List
- https://security.netapp.com/advisory/ntap-20240531-0005/
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007Vendor Advisory
- https://www.debian.org/security/2023/dsa-5480Third Party Advisory
- https://www.debian.org/security/2023/dsa-5492Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/25/3Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/09/25/4Mailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.