CVE-2023-20588: vulnerability in AMD Athlon™ 3000 Series Processors with…
Speculative Leaks
Published · Updated
Follow this CVE+ Monitor AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics+ Monitor AMD EPYC™ 7001 Processors
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 11%
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
Affected products
AMD · Athlon™ 3000 Series Processors with Radeon™ GraphicsAMD · Athlon™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD · EPYC™ 7001 ProcessorsAMD · Ryzen™ 3000 Series Processors with Radeon™ GraphicsAMD · Ryzen™ PRO 3000 Series Processors with Radeon™ Vega GraphicsRelated CVEs — AMD Athlon™ 3000 Series Processors with…
In the same product, most dangerous first.
References
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/https://security.netapp.com/advisory/ntap-20240531-0005/https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007https://www.debian.org/security/2023/dsa-5480https://www.debian.org/security/2023/dsa-5492http://www.openwall.com/lists/oss-security/2023/09/25/3http://www.openwall.com/lists/oss-security/2023/09/25/4http://www.openwall.com/lists/oss-security/2023/09/25/5http://www.openwall.com/lists/oss-security/2023/09/25/7