Lucene search

[email protected]CVE-2020-12965

HistoryFeb 04, 2022 - 11:15 p.m.

CVE-2020-12965

2022-02-0423:15:00

CWE-74

[email protected]

web.nvd.nist.gov

amd

cpu

vulnerability

data leakage

cve-2020-12965

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.1%

JSON

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

CPENameOperatorVersion
amd:ryzen_pro_5650g_firmwareamd ryzen pro 5650g firmwareeq-
amd:ryzen_pro_5650ge_firmwareamd ryzen pro 5650ge firmwareeq-
amd:ryzen_pro_5750g_firmwareamd ryzen pro 5750g firmwareeq-
amd:ryzen_pro_5750ge_firmwareamd ryzen pro 5750ge firmwareeq-
amd:ryzen_pro_5350g_firmwareamd ryzen pro 5350g firmwareeq-
amd:ryzen_pro_5350ge_firmwareamd ryzen pro 5350ge firmwareeq-
amd:ryzen_pro_4750g_firmwareamd ryzen pro 4750g firmwareeq-
amd:ryzen_pro_4750ge_firmwareamd ryzen pro 4750ge firmwareeq-
amd:ryzen_pro_4650g_firmwareamd ryzen pro 4650g firmwareeq-
amd:ryzen_pro_4650ge_firmwareamd ryzen pro 4650ge firmwareeq-

CPE	Name	Operator	Version
amd:ryzen_pro_5650g_firmware	amd ryzen pro 5650g firmware	eq	-
amd:ryzen_pro_5650ge_firmware	amd ryzen pro 5650ge firmware	eq	-
amd:ryzen_pro_5750g_firmware	amd ryzen pro 5750g firmware	eq	-
amd:ryzen_pro_5750ge_firmware	amd ryzen pro 5750ge firmware	eq	-
amd:ryzen_pro_5350g_firmware	amd ryzen pro 5350g firmware	eq	-
amd:ryzen_pro_5350ge_firmware	amd ryzen pro 5350ge firmware	eq	-
amd:ryzen_pro_4750g_firmware	amd ryzen pro 4750g firmware	eq	-
amd:ryzen_pro_4750ge_firmware	amd ryzen pro 4750ge firmware	eq	-
amd:ryzen_pro_4650g_firmware	amd ryzen pro 4650g firmware	eq	-
amd:ryzen_pro_4650ge_firmware	amd ryzen pro 4650ge firmware	eq	-

Rows per page:

1-10 of 631

References

www.openwall.com/lists/oss-security/2023/12/05/3

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

52.1%

JSON

Related for CVE-2020-12965

lenovo1 prion1 thn1 cvelist1 amd1 redhatcve1