← voltar
CVE-2023-20533

CVE-2023-20533

CVSS 6.1 MEDIUMEPSS 0.5%
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:H
Produtos afetados
AMD · 2nd Gen AMD EPYC™ ProcessorsAMD · 3rd Gen AMD EPYC™ ProcessorsAMD · AMD EPYC™ Embedded 7002AMD · AMD EPYC™ Embedded 7002AMD · AMD EPYC™ Embedded 7003AMD · AMD EPYC™ Embedded 7003AMD · AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”AMD · AMD Ryzen™ Embedded 5000AMD · AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDTAMD · AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WSAMD · AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3AMD · Ryzen™ 3000 series Desktop Processors “Matisse"

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001