CVE-2023-20527

🗓️ 10 Jan 2023 20:57:02Reported by AMDType

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service

Reporter	Title	Published	Views	Family All 12
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
BDU FSTEC	The vulnerability of the Bootloader component of AMD processors allows a hacker to trigger a system failure.	1 Mar 202300:00	–	bdu_fstec
CNNVD	AMD Secure Processor(ASP) 输入验证错误漏洞	11 Jan 202300:00	–	cnnvd
CVE	CVE-2023-20527	10 Jan 202320:57	–	cve
EUVD	EUVD-2023-24706	3 Oct 202520:07	–	euvd
HPE Security Bulletins	HPESBHF04404 rev.1 - HPE ProLiant Gen10 and Gen10 Plus Servers Using Certain AMD EPYC Processors, Multiple Local Vulnerabilities	20 Jan 202300:00	–	hpe
NCSC	Vulnerabilities fixed in Dell PowerEdge	13 Jan 202300:00	–	ncsc
NVD	CVE-2023-20527	11 Jan 202308:15	–	nvd
OSV	CVE-2023-20527	11 Jan 202308:15	–	osv
Prion	Design/Logic Flaw	11 Jan 202308:15	–	prion

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen EPYC",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

11 Jan 2023 07:01Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.00595