Lucene search

[email protected]NVD:CVE-2023-20569

HistoryAug 08, 2023 - 6:15 p.m.

CVE-2023-20569

2023-08-0818:15:11

CWE-203

[email protected]

web.nvd.nist.gov

amd

cpus

side channel

vulnerability

speculative execution

information disclosure

attack

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

Affected configurations

NVD

Node

fedoraprojectfedoraMatch37

fedoraprojectfedoraMatch38

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

debiandebian_linuxMatch12.0

Node

amdryzen_9_5950xMatch-

AND

amdryzen_9_5950x_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_9_5900xMatch-

AND

amdryzen_9_5900x_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_9_5900Match-

AND

amdryzen_9_5900_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_9_pro_5945Match-

AND

amdryzen_9_pro_5945_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_7_5800x3dMatch-

AND

amdryzen_7_5800x3d_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_7_5800xMatch-

AND

amdryzen_7_5800x_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_7_5800Match-

AND

amdryzen_7_5800_firmwareRange<comboam4v2pi_1.2.0.b

Node

amdryzen_7_5700x_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_7_5700xMatch-

Node

amdryzen_7_pro_5845_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_7_pro_5845Match-

Node

amdryzen_5_5600x3d_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_5600x3dMatch-

Node

amdryzen_5_5600x_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5600_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_5600Match-

Node

amdryzen_5_pro_5645_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_pro_5645Match-

Node

amdryzen_7_5700_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_7_5700Match-

Node

amdryzen_5_5500_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_5500Match-

Node

amdryzen_3_5100_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_3_5100Match-

Node

amdryzen_7_5700g_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_7_5700gMatch-

Node

amdryzen_7_5700ge_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_7_5700geMatch-

Node

amdryzen_5_5600g_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_5600gMatch-

Node

amdryzen_5_5600ge_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_5_5600geMatch-

Node

amdryzen_3_5300g_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_3_5300gMatch-

Node

amdryzen_3_5300ge_firmwareRange<comboam4v2pi_1.2.0.b

AND

amdryzen_3_5300geMatch-

Node

amdryzen_9_7950x3d_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_9_7950x3dMatch-

Node

amdryzen_9_7950x_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_9_7950xMatch-

Node

amdryzen_9_7900x3d_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_9_7900x3dMatch-

Node

amdryzen_9_7900x_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_9_7900xMatch-

Node

amdryzen_9_7900_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_9_7900Match-

Node

amdryzen_9_pro_7945_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_9_pro_7945Match-

Node

amdryzen_7_7800x3d_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_7_7800x3dMatch-

Node

amdryzen_7_7700x_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_7_7700xMatch-

Node

amdryzen_7_7700_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_7_7700Match-

Node

amdryzen_7_pro_7745_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_7_pro_7745Match-

Node

amdryzen_5_7600x_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_5_7600xMatch-

Node

amdryzen_5_7600_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_5_7600Match-

Node

amdryzen_5_pro_7645_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_5_pro_7645Match-

Node

amdryzen_5_7500f_firmwareRange<comboam5_1.0.8.0

AND

amdryzen_5_7500fMatch-

Node

amdryzen_threadripper_pro_5995wx_firmwareRange<chagallwspi-swrx8_1.0.0.7

AND

amdryzen_threadripper_pro_5995wxMatch-

Node

amdryzen_threadripper_pro_5975wx_firmwareRange<chagallwspi-swrx8_1.0.0.7

AND

amdryzen_threadripper_pro_5975wxMatch-

Node

amdryzen_threadripper_pro_5965wx_firmwareRange<chagallwspi-swrx8_1.0.0.7

AND

amdryzen_threadripper_pro_5965wxMatch-

Node

amdryzen_threadripper_pro_5955wx_firmwareRange<chagallwspi-swrx8_1.0.0.7

AND

amdryzen_threadripper_pro_5955wxMatch-

Node

amdryzen_threadripper_pro_5945wx_firmwareRange<chagallwspi-swrx8_1.0.0.7

AND

amdryzen_threadripper_pro_5945wxMatch-

Node

amdryzen_7_5700u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_7_5700uMatch-

Node

amdryzen_5_5500u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_5500uMatch-

Node

amdryzen_3_5300u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_3_5300uMatch-

Node

amdryzen_9_5980hx_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_9_5980hs_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5900hx_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5900hs_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_7_5800h_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5825u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_7_5825uMatch-

Node

amdryzen_7_5800u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_7_5800uMatch-

Node

amdryzen_5_5600h_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5625u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5600u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5560u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_5560uMatch-

Node

amdryzen_3_5425u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_3_5425uMatch-

Node

amdryzen_3_5400u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5125c_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_3_5125cMatch-

Node

amdryzen_9_6980hx_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_9_6980hxMatch-

Node

amdryzen_9_6980hs_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_9_6980hsMatch-

Node

amdryzen_9_6900hx_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_9_6900hxMatch-

Node

amdryzen_9_6900hs_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_9_6900hsMatch-

Node

amdryzen_7_6800h_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_7_6800hMatch-

Node

amdryzen_7_6800hs_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_7_6800hsMatch-

Node

amdryzen_7_6800u_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_7_6800uMatch-

Node

amdryzen_5_6600h_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_5_6600hMatch-

Node

amdryzen_5_6600hs_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_5_6600hsMatch-

Node

amdryzen_5_6600u_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_5_6600uMatch-

Node

amdryzen_7_7735hs_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_7_7735hsMatch-

Node

amdryzen_7_7736u_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_7_7736uMatch-

Node

amdryzen_7_7735u_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_7_7735uMatch-

Node

amdryzen_5_7535hs_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_5_7535hsMatch-

Node

amdryzen_5_7535u_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_5_7535uMatch-

Node

amdryzen_3_7335u_firmwareRange<rembrandtpi-fp7_1.0.0.9a

AND

amdryzen_3_7335uMatch-

Node

amdryzen_7_pro_7730u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_7_pro_7730uMatch-

Node

amdryzen_5_pro_7530u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_5_pro_7530uMatch-

Node

amdryzen_3_pro_7330u_firmwareRange<cezannepi-fp6_1.0.0.fa

AND

amdryzen_3_pro_7330uMatch-

Node

amdryzen_9_pro_7640hs_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_9_pro_7640hsMatch-

Node

amdryzen_9_7940h_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_9_7940hMatch-

Node

amdryzen_7_pro_7840hs_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_7_pro_7840hsMatch-

Node

amdryzen_7_7840h_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_7_7840hMatch-

Node

amdryzen_7_7840u_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_7_7840uMatch-

Node

amdryzen_5_pro_7640hs_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_5_pro_7640hsMatch-

Node

amdryzen_5_7640h_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_5_7640hMatch-

Node

amdryzen_5_7640u_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_5_7640uMatch-

Node

amdryzen_5_7540u_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_5_7540uMatch-

Node

amdryzen_3_7440u_firmwareRange<phoenixpi-fp8-fp7_1.0.0.2a

AND

amdryzen_3_7440uMatch-

Node

amdryzen_9_7945hx3d_firmwareRange<dragonrangefl1pi_1.0.0.3b

AND

amdryzen_9_7945hx3dMatch-

Node

amdryzen_9_7945hx_firmwareRange<dragonrangefl1pi_1.0.0.3b

AND

amdryzen_9_7945hxMatch-

Node

amdryzen_9_7845hx_firmwareRange<dragonrangefl1pi_1.0.0.3b

AND

amdryzen_9_7845hxMatch-

Node

amdryzen_7_7745hx_firmwareRange<dragonrangefl1pi_1.0.0.3b

AND

amdryzen_7_7745hxMatch-

Node

amdryzen_5_7645hx_firmwareRange<dragonrangefl1pi_1.0.0.3b

AND

amdryzen_5_7645hxMatch-

Node

amdepyc_7773x_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7773xMatch-

Node

amdepyc_7763_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7763Match-

Node

amdepyc_7713_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7713Match-

Node

amdepyc_7713p_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7713pMatch-

Node

amdepyc_7663_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7663Match-

Node

amdepyc_7643_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7643Match-

Node

amdepyc_7573x_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7573xMatch-

Node

amdepyc_75f3_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_75f3Match-

Node

amdepyc_7543_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7543Match-

Node

amdepyc_7543p_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7543pMatch-

Node

amdepyc_7513_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7513Match-

Node

amdepyc_7453_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7453Match-

Node

amdepyc_7473x_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7473xMatch-

Node

amdepyc_74f3_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_74f3Match-

Node

amdepyc_7443_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7443Match-

Node

amdepyc_7443p_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7443pMatch-

Node

amdepyc_7413_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7413Match-

Node

amdepyc_7373x_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7373xMatch-

Node

amdepyc_73f3_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_73f3Match-

Node

amdepyc_7343_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7343Match-

Node

amdepyc_7313_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7313Match-

Node

amdepyc_7313p_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_7313pMatch-

Node

amdepyc_72f3_firmwareRange<milanpi_1.0.0.c

AND

amdepyc_72f3Match-

Node

amdepyc_9124_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9124Match-

Node

amdepyc_9224_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9224Match-

Node

amdepyc_9254_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9254Match-

Node

amdepyc_9334_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9334Match-

Node

amdepyc_9354_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9354Match-

Node

amdepyc_9354p_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9354pMatch-

Node

amdepyc_9174f_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9174fMatch-

Node

amdepyc_9184x_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9184xMatch-

Node

amdepyc_9274f_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9274fMatch-

Node

amdepyc_9374f_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9374fMatch-

Node

amdepyc_9384x_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9384xMatch-

Node

amdepyc_9474f_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9474fMatch-

Node

amdepyc_9454_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9454Match-

Node

amdepyc_9454p_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9454pMatch-

Node

amdepyc_9534_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9534Match-

Node

amdepyc_9554_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9554Match-

Node

amdepyc_9554p_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9554pMatch-

Node

amdepyc_9634_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9634Match-

Node

amdepyc_9654_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9654Match-

Node

amdepyc_9654p_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9654pMatch-

Node

amdepyc_9684x_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9684xMatch-

Node

amdepyc_9734_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9734Match-

Node

amdepyc_9754s_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9754sMatch-

Node

amdepyc_9754_firmwareRange<genoapi_1.0.0.9

AND

amdepyc_9754Match-

Node

microsoftwindows_10_1507Range<10.0.10240.20107

microsoftwindows_10_1607Range<10.0.14393.6167

microsoftwindows_10_1809Range<10.0.17763.5206

microsoftwindows_10_21h2Range<10.0.19044.3324

microsoftwindows_10_22h2Range<10.0.19045.3324

microsoftwindows_11_21h2Range<10.0.22000.2295

microsoftwindows_11_22h2Range<10.0.22621.2134

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Range<10.0.14393.6167

microsoftwindows_server_2019Range<10.0.17763.4737

microsoftwindows_server_2022Range<10.0.20348.1906

References

www.openwall.com/lists/oss-security/2023/08/08/4

xenbits.xen.org/xsa/advisory-434.html

comsec.ethz.ch/research/microarch/inception/

lists.debian.org/debian-lts-announce/2023/08/msg00013.html

lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/

lists.fedoraproject.org/archives/list/[email protected]/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/

lists.fedoraproject.org/archives/list/[email protected]/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/

lists.fedoraproject.org/archives/list/[email protected]/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/

security.netapp.com/advisory/ntap-20240605-0006/

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005

www.debian.org/security/2023/dsa-5475

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

JSON

Related for NVD:CVE-2023-20569