CVE-2023-20588: fallo en AMD Athlon™ 3000 Series Processors with…
Speculative Leaks
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics+ Monitorear AMD EPYC™ 7001 Processors
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 11%
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
Productos afectados
AMD · Athlon™ 3000 Series Processors with Radeon™ GraphicsAMD · Athlon™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD · EPYC™ 7001 ProcessorsAMD · Ryzen™ 3000 Series Processors with Radeon™ GraphicsAMD · Ryzen™ PRO 3000 Series Processors with Radeon™ Vega GraphicsCVEs relacionadas — AMD Athlon™ 3000 Series Processors with…
En el mismo producto, de las más peligrosas a las menos.
Referencias
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/https://security.netapp.com/advisory/ntap-20240531-0005/https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007https://www.debian.org/security/2023/dsa-5480https://www.debian.org/security/2023/dsa-5492http://www.openwall.com/lists/oss-security/2023/09/25/3http://www.openwall.com/lists/oss-security/2023/09/25/4http://www.openwall.com/lists/oss-security/2023/09/25/5http://www.openwall.com/lists/oss-security/2023/09/25/7