CVE-2023-20588
medium · 5.5A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
5.5
CVSS
11.3%
EPSS (exploit prob.)
96th
EPSS percentile
2023-08-08
Published
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-369
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
| debian | debian_linux | 12.0 |
| amd | epyc_7351p_firmware | all versions |
| amd | epyc_7351p | all versions |
| amd | epyc_7401p_firmware | all versions |
| amd | epyc_7401p | all versions |
| amd | epyc_7551p_firmware | all versions |
| amd | epyc_7551p | all versions |
| amd | epyc_7251_firmware | all versions |
| amd | epyc_7251 | all versions |
| amd | epyc_7261_firmware | all versions |
| amd | epyc_7261 | all versions |
| amd | epyc_7281_firmware | all versions |
| amd | epyc_7281 | all versions |
| amd | epyc_7301_firmware | all versions |
| amd | epyc_7301 | all versions |
| amd | epyc_7351_firmware | all versions |
| amd | epyc_7351 | all versions |
| amd | epyc_7371_firmware | all versions |
| amd | epyc_7371 | all versions |
| amd | epyc_7401_firmware | all versions |
| amd | epyc_7401 | all versions |
| amd | epyc_7451_firmware | all versions |
| amd | epyc_7451 | all versions |
| amd | epyc_7501_firmware | all versions |
| amd | epyc_7501 | all versions |
| amd | epyc_7551_firmware | all versions |
| amd | epyc_7551 | all versions |
| amd | epyc_7571_firmware | all versions |
| amd | epyc_7571 | all versions |
| amd | epyc_7601_firmware | all versions |
| amd | epyc_7601 | all versions |
| amd | ryzen_5_pro_3400g_firmware | all versions |
| amd | ryzen_5_pro_3400g | all versions |
| amd | ryzen_5_3400g_firmware | all versions |
| amd | ryzen_5_3400g | all versions |
| amd | ryzen_5_pro_3400ge_firmware | all versions |
| amd | ryzen_5_pro_3400ge | all versions |
| amd | ryzen_5_pro_3350g_firmware | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.openwall.com/lists/oss-security/2023/09/25/3
- http://www.openwall.com/lists/oss-security/2023/09/25/4
- http://www.openwall.com/lists/oss-security/2023/09/25/5
- http://www.openwall.com/lists/oss-security/2023/09/25/7
- http://www.openwall.com/lists/oss-security/2023/09/25/8
- http://www.openwall.com/lists/oss-security/2023/09/26/5
- http://www.openwall.com/lists/oss-security/2023/09/26/8
- http://www.openwall.com/lists/oss-security/2023/09/26/9
- http://www.openwall.com/lists/oss-security/2023/09/27/1
- http://www.openwall.com/lists/oss-security/2023/10/03/12
- http://www.openwall.com/lists/oss-security/2023/10/03/13
- http://www.openwall.com/lists/oss-security/2023/10/03/14
- http://www.openwall.com/lists/oss-security/2023/10/03/15
- http://www.openwall.com/lists/oss-security/2023/10/03/16
- http://www.openwall.com/lists/oss-security/2023/10/03/9
- http://www.openwall.com/lists/oss-security/2023/10/04/1
- http://www.openwall.com/lists/oss-security/2023/10/04/2
- http://www.openwall.com/lists/oss-security/2023/10/04/3
- http://www.openwall.com/lists/oss-security/2023/10/04/4
- http://xenbits.xen.org/xsa/advisory-439.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/
- https://security.netapp.com/advisory/ntap-20240531-0005/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-20588