Lucene search

AMDCVE-2023-20593

HistoryJul 24, 2023 - 8:15 p.m.

CVE-2023-20593

2023-07-2420:15:10

AMD

web.nvd.nist.gov

236

cve-2023-20593

zen 2

cpus

microarchitectural

security issue

information security

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

35.1%

JSON

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Affected configurations

Nvd

Node

xenxenMatch4.14.0x86

xenxenMatch4.15.0x86

xenxenMatch4.16.0x86

xenxenMatch4.17.0x86

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

debiandebian_linuxMatch12.0

Node

amdryzen_3_3100_firmwareMatch-

AND

amdryzen_3_3100Match-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

Node

amdryzen_5_3500_firmwareMatch-

AND

amdryzen_5_3500Match-

Node

amdryzen_5_3500x_firmwareMatch-

AND

amdryzen_5_3500xMatch-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_5_3600xt_firmwareMatch-

AND

amdryzen_5_3600xtMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_7_3800xt_firmwareMatch-

AND

amdryzen_7_3800xtMatch-

Node

amdryzen_9_3900_firmwareMatch-

AND

amdryzen_9_3900Match-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3900xt_firmwareMatch-

AND

amdryzen_9_3900xtMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_9_pro_3900_firmwareMatch-

AND

amdryzen_9_pro_3900Match-

Node

amdryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3995wxMatch-

Node

amdryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3975wxMatch-

Node

amdryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3955wxMatch-

Node

amdryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3945wxMatch-

Node

amdryzen_threadripper_3990xMatch-

AND

amdryzen_threadripper_3990x_firmwareMatch-

Node

amdryzen_threadripper_3970xMatch-

AND

amdryzen_threadripper_3970x_firmwareMatch-

Node

amdryzen_threadripper_3960xMatch-

AND

amdryzen_threadripper_3960x_firmwareMatch-

Node

amdryzen_7_4700gMatch-

AND

amdryzen_7_4700g_firmwareMatch-

Node

amdryzen_7_4700geMatch-

AND

amdryzen_7_4700ge_firmwareMatch-

Node

amdryzen_5_4600gMatch-

AND

amdryzen_5_4600g_firmwareMatch-

Node

amdryzen_5_4600geMatch-

AND

amdryzen_5_4600ge_firmwareMatch-

Node

amdryzen_3_4300gMatch-

AND

amdryzen_3_4300g_firmwareMatch-

Node

amdryzen_3_4300ge_firmwareMatch-

AND

amdryzen_3_4300geMatch-

Node

amdryzen_3_pro_4450u_firmwareMatch-

AND

amdryzen_3_pro_4450uMatch-

Node

amdryzen_3_pro_4350ge_firmwareMatch-

AND

amdryzen_3_pro_4350geMatch-

Node

amdryzen_3_pro_4350g_firmwareMatch-

AND

amdryzen_3_pro_4350gMatch-

Node

amdryzen_3_pro_4200g_firmwareMatch-

AND

amdryzen_3_pro_4200gMatch-

Node

amdryzen_5_pro_4650ge_firmwareMatch-

AND

amdryzen_5_pro_4650geMatch-

Node

amdryzen_5_pro_4650g_firmwareMatch-

AND

amdryzen_5_pro_4650gMatch-

Node

amdryzen_5_pro_4400g_firmwareMatch-

AND

amdryzen_5_pro_4400gMatch-

Node

amdryzen_7_pro_4750u_firmwareMatch-

AND

amdryzen_7_pro_4750uMatch-

Node

amdryzen_7_pro_4750ge_firmwareMatch-

AND

amdryzen_7_pro_4750geMatch-

Node

amdryzen_7_pro_4750g_firmwareMatch-

AND

amdryzen_7_pro_4750gMatch-

Node

amdryzen_7_5700u_firmwareMatch-

AND

amdryzen_7_5700uMatch-

Node

amdryzen_5_5500u_firmwareMatch-

AND

amdryzen_5_5500uMatch-

Node

amdryzen_3_5300u_firmwareMatch-

AND

amdryzen_3_5300uMatch-

Node

amdryzen_5_7520u_firmwareMatch-

AND

amdryzen_5_7520uMatch-

Node

amdryzen_3_7320u_firmwareMatch-

AND

amdryzen_3_7320uMatch-

Node

amdathlon_gold_7220u_firmwareMatch-

AND

amdathlon_gold_7220uMatch-

Node

amdepyc_7232p_firmwareMatch-

AND

amdepyc_7232pMatch-

Node

amdepyc_7302p_firmwareMatch-

AND

amdepyc_7302pMatch-

Node

amdepyc_7402p_firmwareMatch-

AND

amdepyc_7402pMatch-

Node

amdepyc_7502p_firmwareMatch-

AND

amdepyc_7502pMatch-

Node

amdepyc_7702p_firmwareMatch-

AND

amdepyc_7702pMatch-

Node

amdepyc_7252_firmwareMatch-

AND

amdepyc_7252Match-

Node

amdepyc_7262_firmwareMatch-

AND

amdepyc_7262Match-

Node

amdepyc_7272_firmwareMatch-

AND

amdepyc_7272Match-

Node

amdepyc_7282_firmwareMatch-

AND

amdepyc_7282Match-

Node

amdepyc_7302_firmwareMatch-

AND

amdepyc_7302Match-

Node

amdepyc_7352_firmwareMatch-

AND

amdepyc_7352Match-

Node

amdepyc_7402_firmwareMatch-

AND

amdepyc_7402Match-

Node

amdepyc_7452_firmwareMatch-

AND

amdepyc_7452Match-

Node

amdepyc_7502_firmwareMatch-

AND

amdepyc_7502Match-

Node

amdepyc_7532_firmwareMatch-

AND

amdepyc_7532Match-

Node

amdepyc_7542_firmwareMatch-

AND

amdepyc_7542Match-

Node

amdepyc_7552_firmwareMatch-

AND

amdepyc_7552Match-

Node

amdepyc_7642_firmwareMatch-

AND

amdepyc_7642Match-

Node

amdepyc_7662_firmwareMatch-

AND

amdepyc_7662Match-

Node

amdepyc_7702_firmwareMatch-

AND

amdepyc_7702Match-

Node

amdepyc_7742_firmwareMatch-

AND

amdepyc_7742Match-

Node

amdepyc_7h12_firmwareMatch-

AND

amdepyc_7h12Match-

Node

amdepyc_7f32_firmwareMatch-

AND

amdepyc_7f32Match-

Node

amdepyc_7f52_firmwareMatch-

AND

amdepyc_7f52Match-

Node

amdepyc_7f72_firmwareMatch-

AND

amdepyc_7f72Match-

VendorProductVersionCPE
xenxen4.16.0cpe:/o:xen:xen:4.16.0:::
xenxen4.14.0cpe:/o:xen:xen:4.14.0:::
xenxen4.17.0cpe:/o:xen:xen:4.17.0:::
xenxen4.15.0cpe:/o:xen:xen:4.15.0:::

Vendor	Product	Version	CPE
xen	xen	4.16.0	cpe:/o:xen:xen:4.16.0:::
xen	xen	4.14.0	cpe:/o:xen:xen:4.14.0:::
xen	xen	4.17.0	cpe:/o:xen:xen:4.17.0:::
xen	xen	4.15.0	cpe:/o:xen:xen:4.15.0:::

CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Desktop Processors “Matisse” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Lucienne”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 4000 Series Mobile processors with Radeon™ Graphics “Renoir”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 7020 Series processors “Mendocino” FT6",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "µcode / AGESA™ firmware",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2023/Jul/43

www.openwall.com/lists/oss-security/2023/07/24/3

www.openwall.com/lists/oss-security/2023/07/25/1

www.openwall.com/lists/oss-security/2023/07/25/12

www.openwall.com/lists/oss-security/2023/07/25/13

www.openwall.com/lists/oss-security/2023/07/25/14

www.openwall.com/lists/oss-security/2023/07/25/15

www.openwall.com/lists/oss-security/2023/07/25/16

www.openwall.com/lists/oss-security/2023/07/25/17

www.openwall.com/lists/oss-security/2023/07/25/5

www.openwall.com/lists/oss-security/2023/07/25/6

www.openwall.com/lists/oss-security/2023/07/26/1

www.openwall.com/lists/oss-security/2023/07/31/2

www.openwall.com/lists/oss-security/2023/08/08/6

www.openwall.com/lists/oss-security/2023/08/08/7

www.openwall.com/lists/oss-security/2023/08/08/8

www.openwall.com/lists/oss-security/2023/08/16/4

www.openwall.com/lists/oss-security/2023/08/16/5

www.openwall.com/lists/oss-security/2023/09/22/11

www.openwall.com/lists/oss-security/2023/09/22/9

www.openwall.com/lists/oss-security/2023/09/25/4

www.openwall.com/lists/oss-security/2023/09/25/7

xenbits.xen.org/xsa/advisory-433.html

cmpxchg8b.com/zenbleed.html

lists.debian.org/debian-lts-announce/2023/07/msg00030.html

lists.debian.org/debian-lts-announce/2023/07/msg00033.html

lists.debian.org/debian-lts-announce/2023/08/msg00001.html

lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/

lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/

lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/

security.netapp.com/advisory/ntap-20240531-0004/

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008

www.debian.org/security/2023/dsa-5459

www.debian.org/security/2023/dsa-5461

www.debian.org/security/2023/dsa-5462

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

35.1%

JSON

CVE-2023-20593

Affected configurations

CNA Affected

References

Social References

Related