CVE-2023-20588 | Severity.io

Description

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

Related CPE's

o

debian

debian_linux

3

epyc_7351p_firmware

Vulnerable

epyc_7401p_firmware

Vulnerable

epyc_7551p_firmware

Vulnerable

epyc_7251_firmware

Vulnerable

epyc_7261_firmware

Vulnerable

epyc_7281_firmware

Vulnerable

epyc_7301_firmware

Vulnerable

epyc_7351_firmware

Vulnerable

epyc_7371_firmware

Vulnerable

epyc_7401_firmware

Vulnerable

epyc_7451_firmware

Vulnerable

epyc_7501_firmware

Vulnerable

epyc_7551_firmware

Vulnerable

epyc_7571_firmware

Vulnerable

epyc_7601_firmware

Vulnerable

ryzen_5_pro_3400g_firmware

Vulnerable

ryzen_5_pro_3400g

ryzen_5_3400g_firmware

Vulnerable

ryzen_5_pro_3400ge_firmware

Vulnerable

ryzen_5_pro_3400ge

ryzen_5_pro_3350g_firmware

Vulnerable

ryzen_5_pro_3350g

ryzen_5_pro_3350ge_firmware

Vulnerable

ryzen_5_pro_3350ge

ryzen_3_pro_3200g_firmware

Vulnerable

ryzen_3_pro_3200g

ryzen_3_3200g_firmware

Vulnerable

ryzen_3_3200ge_firmware

Vulnerable

ryzen_3_pro_3200ge_firmware

Vulnerable

ryzen_3_pro_3200ge

athlon_pro_300ge_firmware

Vulnerable

athlon_pro_300ge

athlon_gold_3150ge_firmware

Vulnerable

athlon_gold_3150ge

athlon_gold_pro_3150ge_firmware

Vulnerable

athlon_gold_pro_3150ge

athlon_gold_3150g_firmware

Vulnerable

athlon_gold_3150g

athlon_gold_pro_3150g_firmware

Vulnerable

athlon_gold_pro_3150g

athlon_silver_3050ge_firmware

Vulnerable

athlon_silver_3050ge

athlon_silver_pro_3125ge_firmware

Vulnerable

athlon_silver_pro_3125ge

Vulnerable

o

fedoraproject

fedora

3

windows_10_1507

Vulnerable

windows_10_1607

Vulnerable

windows_10_1809

Vulnerable

windows_10_21h2

Vulnerable

windows_10_22h2

Vulnerable

windows_11_21h2

Vulnerable

windows_11_22h2

Vulnerable

windows_11_23h2

Vulnerable

o

microsoft

windows_server_2008

2

o

microsoft

windows_server_2012

2

windows_server_2016

Vulnerable

windows_server_2019

Vulnerable

windows_server_2022_23h2

Vulnerable

References

http://www.openwall.com/lists/oss-security/2023/09/25/3

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/25/4

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/25/5

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/25/7

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/25/8

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/26/5

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/26/8

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/26/9

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/27/1

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/12

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/13

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/14

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/15

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/16

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/9

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/04/1

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/04/2

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/04/3

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/04/4

Mailing ListThird Party Advisory

http://xenbits.xen.org/xsa/advisory-439.html

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/[email protected]/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/

Mailing List

https://lists.fedoraproject.org/archives/list/[email protected]/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/

Mailing List

https://lists.fedoraproject.org/archives/list/[email protected]/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/

Mailing List

https://security.netapp.com/advisory/ntap-20240531-0005/

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007

Vendor Advisory

https://www.debian.org/security/2023/dsa-5480

Third Party Advisory

https://www.debian.org/security/2023/dsa-5492

Third Party Advisory

Weaknesses

[email protected]

Primary

CWE-369

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 · Medium

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-08T18:15:11.653

1 year ago

Last modified

2024-06-10T18:15:19.940

4 months ago