Lucene search
Ubuntu.comUB:CVE-2023-20592HistoryNov 14, 2023 - 12:00 a.m.
CVE-2023-20592
2023-11-1400:00:00
ubuntu.com
ubuntu.com
14
amd cpus
hypervisor
cache behavior
guest vm
memory integrity
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
26.1%
Improper or unexpected behavior of the INVD instruction in some AMD CPUs
may allow an attacker with a malicious hypervisor to affect cache line
write-back behavior of the CPU leading to a potential loss of guest virtual
machine (VM) memory integrity.
Notes
| Author | Note |
|---|---|
| alexmurray | The microcode revisions listed in the AMD advisory AMD-SB-3005 were contained in the upstream commit b250b32ab1d044953af2dc5e790819a7703b7ee6 - this was already provided to the various Ubuntu releases in USN-6319-1 for CVE-2023-20569, as such they are not affected by this CVE. |
Related
redhat
redhat
(RHSA-2024:0979) Moderate: linux-firmware security update
2024-02-26 09:13:25
(RHSA-2024:0978) Moderate: linux-firmware security update
2024-02-26 09:13:17
(RHSA-2024:0753) Moderate: linux-firmware security update
2024-02-08 17:23:15
amd
amd
AMD INVD Instruction Security Notice
2023-11-14 00:00:00
Return Address Security Bulletin
2023-08-08 00:00:00
nessus
nessus
RHEL 7 : linux-firmware (RHSA-2024:0978)
2024-02-26 00:00:00
RHEL 7 : linux-firmware (RHSA-2024:0979)
2024-02-27 00:00:00
RHEL 7 : linux-firmware (RHSA-2024:0753)
2024-04-28 00:00:00
veracode
veracode
Memory Integrity Loss
2023-11-28 13:21:22
Information Disclosure
2023-08-13 09:11:17
debiancve
debiancve
CVE-2023-20592
2023-11-14 19:15:16
CVE-2023-20569
2023-08-08 18:15:11
centos
centos
cvelist
cvelist
CVE-2023-20592
2023-11-14 18:54:13
CVE-2023-20569
2023-08-08 17:02:11
cve
cve
CVE-2023-20592
2023-11-14 19:15:16
CVE-2023-20569
2023-08-08 18:15:11
openvas
openvas
CentOS: Security Advisory for iwl1000-firmware (CESA-2024:0753)
2024-03-05 00:00:00
openSUSE: Security Advisory for kernel (SUSE-SU-2023:3298-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3262-1)
2023-08-11 00:00:00
prion
prion
Input validation
2023-11-14 19:15:00
Information disclosure
2023-08-08 18:15:00
redhatcve
redhatcve
CVE-2023-20592
2023-11-15 00:28:23
CVE-2023-20569
2023-08-08 19:18:52
nvd
nvd
CVE-2023-20592
2023-11-14 19:15:16
CVE-2023-20569
2023-08-08 18:15:11
redos
redos
ROS-20240902-02
2024-09-02 00:00:00
ubuntucve
ubuntucve
CVE-2023-20569
2023-08-08 00:00:00
oraclelinux
oraclelinux
linux-firmware security update
2023-08-08 00:00:00
linux-firmware security update
2023-08-08 00:00:00
linux-firmware security update
2023-08-08 00:00:00
xen
xen
x86/AMD: Speculative Return Stack Overflow
2023-08-08 15:53:00
osv
osv
CVE-2023-20569
2023-08-08 18:15:11
amd64-microcode vulnerability
2023-08-30 00:46:25
Moderate: linux-firmware security, bug fix, and enhancement update
2023-11-14 00:00:00
ubuntu
ubuntu
AMD Microcode vulnerability
2023-08-30 00:00:00
Linux kernel (OEM) vulnerabilities
2023-10-04 00:00:00
cloudfoundry
cloudfoundry
USN-6319-1: AMD Microcode vulnerability | Cloud Foundry
2023-10-05 00:00:00
mscve
mscve
AMD: CVE-2023-20569 Return Address Predictor
2023-08-08 07:00:00
almalinux
almalinux
Moderate: linux-firmware security, bug fix, and enhancement update
2023-11-14 00:00:00
Important: linux-firmware security update
2024-05-22 00:00:00
Important: kernel security update
2024-01-10 00:00:00
hp
hp
AMD Client UEFI Firmware Return Address Security Update
2023-12-07 00:00:00
f5
f5
K000139684: AMD processors vulnerability CVE-2023-20569
2024-05-20 00:00:00
thn
thn
debian
debian
[SECURITY] [DSA 5475-1] linux security update
2023-08-11 07:57:07
[SECURITY] [DLA 3525-1] linux-5.10 security update
2023-08-11 17:21:05
fedora
fedora
[SECURITY] Fedora 38 Update: kernel-6.4.9-200.fc38
2023-08-10 00:43:18
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
[SECURITY] Fedora 37 Update: kernel-6.4.9-100.fc37
2023-08-10 00:43:46
citrix
citrix
talosblog
talosblog
We all just need to agree that ad blockers are good
2023-11-16 19:00:39
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
amazon
amazon
Important: kernel
2023-08-03 18:09:00
rocky
rocky
kernel security update
2024-01-12 19:59:56
kernel-rt security update
2024-01-12 19:57:11
kaspersky
kaspersky
KLA51716 Multiple vulnerabilities in Microsoft Azure
2023-08-08 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
26.1%
Related for UB:CVE-2023-20592