VulnerabilityModified
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
MEDIUM 5.5EPSS 5.19%
Does this matter?
Lower severity and a low EPSS score (5.19%). Track it; it rarely justifies an emergency change on its own.
Description
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 5.19% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-209
- Affected
- xen/xen · debian/debian linux · amd/ryzen 3 3100 firmware · amd/ryzen 3 3300x firmware · amd/ryzen 5 3500 firmware · amd/ryzen 5 3500x firmware · amd/ryzen 5 3600 firmware · amd/ryzen 5 3600x firmware · amd/ryzen 5 3600xt firmware · amd/ryzen 7 3700x firmware · amd/ryzen 7 3800x firmware · amd/ryzen 7 3800xt firmware · amd/ryzen 9 3900 firmware · amd/ryzen 9 3900x firmware · amd/ryzen 9 3900xt firmware · amd/ryzen 9 3950x firmware · amd/ryzen 9 pro 3900 firmware · amd/ryzen threadripper pro 3995wx firmware · amd/ryzen threadripper pro 3975wx firmware · amd/ryzen threadripper pro 3955wx firmware · +40 more
- Source
- psirt@amd.com
References
- http://seclists.org/fulldisclosure/2023/Jul/43Not Applicable
- http://www.openwall.com/lists/oss-security/2023/07/24/3Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/1Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/12Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/13Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/14Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/15Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/16Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/17Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/5Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/25/6Mailing List
- http://www.openwall.com/lists/oss-security/2023/07/26/1Mailing List, Mitigation, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/07/31/2Mailing List, Mitigation, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/08/08/6
- http://www.openwall.com/lists/oss-security/2023/08/08/7
- http://www.openwall.com/lists/oss-security/2023/08/08/8
- http://www.openwall.com/lists/oss-security/2023/08/16/4
- http://www.openwall.com/lists/oss-security/2023/08/16/5
- http://www.openwall.com/lists/oss-security/2023/09/22/11
- http://www.openwall.com/lists/oss-security/2023/09/22/9
- http://www.openwall.com/lists/oss-security/2023/09/25/4
- http://www.openwall.com/lists/oss-security/2023/09/25/7
- http://xenbits.xen.org/xsa/advisory-433.htmlMitigation, Patch, Vendor Advisory
- https://cmpxchg8b.com/zenbleed.htmlExploit
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlMailing List
- https://lists.debian.org/debian-lts-announce/2023/07/msg00033.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.