Lucene search

K
nvd[email protected]NVD:CVE-2020-12965
HistoryFeb 04, 2022 - 11:15 p.m.

CVE-2020-12965

2022-02-0423:15:10
CWE-74
web.nvd.nist.gov
5
amd
cpu
non-canonical
data leakage
transient execution

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.4%

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

Affected configurations

Nvd
Node
amdryzen_pro_5650g_firmwareMatch-
AND
amdryzen_pro_5650gMatch-
Node
amdryzen_pro_5650ge_firmwareMatch-
AND
amdryzen_pro_5650geMatch-
Node
amdryzen_pro_5750g_firmwareMatch-
AND
amdryzen_pro_5750gMatch-
Node
amdryzen_pro_5750ge_firmwareMatch-
AND
amdryzen_pro_5750geMatch-
Node
amdryzen_pro_5350g_firmwareMatch-
AND
amdryzen_pro_5350gMatch-
Node
amdryzen_pro_5350ge_firmwareMatch-
AND
amdryzen_pro_5350geMatch-
Node
amdryzen_pro_4750g_firmwareMatch-
AND
amdryzen_pro_4750gMatch-
Node
amdryzen_pro_4750ge_firmwareMatch-
AND
amdryzen_pro_4750geMatch-
Node
amdryzen_pro_4650g_firmwareMatch-
AND
amdryzen_pro_4650gMatch-
Node
amdryzen_pro_4650ge_firmwareMatch-
AND
amdryzen_pro_4650geMatch-
Node
amdryzen_pro_4350g_firmwareMatch-
AND
amdryzen_pro_4350gMatch-
Node
amdryzen_pro_4350ge_firmwareMatch-
AND
amdryzen_pro_4350geMatch-
Node
amdryzen_pro_3900_firmwareMatch-
AND
amdryzen_pro_3900Match-
Node
amdryzen_pro_3700_firmwareMatch-
AND
amdryzen_pro_3700Match-
Node
amdryzen_pro_3600_firmwareMatch-
AND
amdryzen_pro_3600Match-
Node
amdryzen_pro_3400g_firmwareMatch-
AND
amdryzen_pro_3400gMatch-
Node
amdryzen_pro_3400ge_firmwareMatch-
AND
amdryzen_pro_3400geMatch-
Node
amdryzen_pro_3350g_firmwareMatch-
AND
amdryzen_pro_3350gMatch-
Node
amdryzen_pro_3200g_firmwareMatch-
AND
amdryzen_pro_3200gMatch-
Node
amdryzen_pro_3200ge_firmwareMatch-
AND
amdryzen_pro_3200geMatch-
Node
amdryzen_pro_2400g_firmwareMatch-
AND
amdryzen_pro_2400gMatch-
Node
amdryzen_pro_2400ge_firmwareMatch-
AND
amdryzen_pro_2400geMatch-
Node
amdryzen_pro_2200g_firmwareMatch-
AND
amdryzen_pro_2200gMatch-
Node
amdryzen_pro_2200ge_firmwareMatch-
AND
amdryzen_pro_2200geMatch-
Node
amdryzen_threadripper_pro_3995wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3995wxMatch-
Node
amdryzen_threadripper_pro_3975wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3975wxMatch-
Node
amdryzen_threadripper_pro_3955wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3955wxMatch-
Node
amdryzen_threadripper_pro_3945wx_firmwareMatch-
AND
amdryzen_threadripper_pro_3945wxMatch-
Node
amdathlon_gold_pro_3150g_firmwareMatch-
AND
amdathlon_gold_pro_3150gMatch-
Node
amdathlon_gold_pro_3150ge_firmwareMatch-
AND
amdathlon_gold_pro_3150geMatch-
Node
amdathlon_silver_pro_3125ge_firmwareMatch-
AND
amdathlon_silver_pro_3125geMatch-
Node
amdathlon_pro_300ge_firmwareMatch-
AND
amdathlon_pro_300geMatch-
Node
amdathlon_pro_200ge_firmwareMatch-
AND
amdathlon_pro_200geMatch-
Node
amdryzen_threadripper_3990x_firmwareMatch-
AND
amdryzen_threadripper_3990xMatch-
Node
amdryzen_threadripper_3970x_firmwareMatch-
AND
amdryzen_threadripper_3970xMatch-
Node
amdryzen_threadripper_3960x_firmwareMatch-
AND
amdryzen_threadripper_3960xMatch-
Node
amdryzen_threadripper_2990wx_firmwareMatch-
AND
amdryzen_threadripper_2990wxMatch-
Node
amdryzen_threadripper_2970wx_firmwareMatch-
AND
amdryzen_threadripper_2970wxMatch-
Node
amdryzen_threadripper_2950x_firmwareMatch-
AND
amdryzen_threadripper_2950xMatch-
Node
amdryzen_threadripper_2920x_firmwareMatch-
AND
amdryzen_threadripper_2920xMatch-
Node
amdryzen_threadripper_1950x_firmwareMatch-
AND
amdryzen_threadripper_1950xMatch-
Node
amdryzen_threadripper_1920x_firmwareMatch-
AND
amdryzen_threadripper_1920xMatch-
Node
amdryzen_threadripper_1920x_firmwareMatch-
AND
amdryzen_threadripper_1920xMatch-
Node
amdryzen_threadripper_1900x_firmwareMatch-
AND
amdryzen_threadripper_1900xMatch-
Node
amdryzen_5950x_firmwareMatch-
AND
amdryzen_5950xMatch-
Node
amdryzen_5800x3d_firmwareMatch-
AND
amdryzen_5800x3dMatch-
Node
amdryzen_5900x_firmwareMatch-
AND
amdryzen_5900xMatch-
Node
amdryzen_5800x_firmwareMatch-
AND
amdryzen_5800xMatch-
Node
amdryzen_5600x_firmwareMatch-
AND
amdryzen_5600xMatch-
Node
amdryzen_5700g_firmwareMatch-
AND
amdryzen_5700gMatch-
Node
amdryzen_5600g_firmwareMatch-
AND
amdryzen_5600gMatch-
Node
amdryzen_5700g_firmwareMatch-
AND
amdryzen_5700gMatch-
Node
amdryzen_5700ge_firmwareMatch-
AND
amdryzen_5700geMatch-
Node
amdryzen_5600g_firmwareMatch-
AND
amdryzen_5600gMatch-
Node
amdryzen_5600ge_firmwareMatch-
AND
amdryzen_5600geMatch-
Node
amdryzen_5300g_firmwareMatch-
AND
amdryzen_5300gMatch-
Node
amdryzen_5300ge_firmwareMatch-
AND
amdryzen_5300geMatch-
Node
amdryzen_4700g_firmwareMatch-
AND
amdryzen_4700gMatch-
Node
amdryzen_4600g_firmwareMatch-
AND
amdryzen_4600gMatch-
Node
amdryzen_4300g_firmwareMatch-
AND
amdryzen_4300gMatch-
Node
amdryzen_4700ge_firmwareMatch-
AND
amdryzen_4700geMatch-
Node
amdryzen_4600ge_firmwareMatch-
AND
amdryzen_4600geMatch-
Node
amdryzen_4300ge_firmwareMatch-
AND
amdryzen_4300geMatch-
Node
amdathlon_3150ge_firmwareMatch-
AND
amdathlon_3150geMatch-
Node
amdathlon_3150g_firmwareMatch-
AND
amdathlon_3150gMatch-
Node
amdathlon_3050ge_firmwareMatch-
AND
amdathlon_3050geMatch-
VendorProductVersionCPE
amdryzen_pro_5650g_firmware-cpe:2.3:o:amd:ryzen_pro_5650g_firmware:-:*:*:*:*:*:*:*
amdryzen_pro_5650g-cpe:2.3:h:amd:ryzen_pro_5650g:-:*:*:*:*:*:*:*
amdryzen_pro_5650ge_firmware-cpe:2.3:o:amd:ryzen_pro_5650ge_firmware:-:*:*:*:*:*:*:*
amdryzen_pro_5650ge-cpe:2.3:h:amd:ryzen_pro_5650ge:-:*:*:*:*:*:*:*
amdryzen_pro_5750g_firmware-cpe:2.3:o:amd:ryzen_pro_5750g_firmware:-:*:*:*:*:*:*:*
amdryzen_pro_5750g-cpe:2.3:h:amd:ryzen_pro_5750g:-:*:*:*:*:*:*:*
amdryzen_pro_5750ge_firmware-cpe:2.3:o:amd:ryzen_pro_5750ge_firmware:-:*:*:*:*:*:*:*
amdryzen_pro_5750ge-cpe:2.3:h:amd:ryzen_pro_5750ge:-:*:*:*:*:*:*:*
amdryzen_pro_5350g_firmware-cpe:2.3:o:amd:ryzen_pro_5350g_firmware:-:*:*:*:*:*:*:*
amdryzen_pro_5350g-cpe:2.3:h:amd:ryzen_pro_5350g:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 1261

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

53.4%

Related for NVD:CVE-2020-12965