CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - psirt@amd.com
- Published
- 2023-07-24
- Last modified
- 2025-02-13
- Weaknesses
- CWE-209
Affected products
- 2nd Gen Amd Epyc Processors (Amd)
- 3rd Gen Amd Ryzen Threadripper Processors Castle Peak Hedt (Amd)
- Amd Ryzen 4000 Series Desktop Processors With Radeon Graphics Renoir Am4 (Amd)
- Athlon Gold 7220u Firmware (Amd)
- Epyc 7232p Firmware (Amd)
- Epyc 7252 Firmware (Amd)
- Epyc 7262 Firmware (Amd)
- Epyc 7272 Firmware (Amd)
- Epyc 7282 Firmware (Amd)
- Epyc 7302 Firmware (Amd)
- Epyc 7302p Firmware (Amd)
- Epyc 7352 Firmware (Amd)
- Epyc 7402 Firmware (Amd)
- Epyc 7402p Firmware (Amd)
- Epyc 7452 Firmware (Amd)
- Epyc 7502 Firmware (Amd)
- Epyc 7502p Firmware (Amd)
- Epyc 7532 Firmware (Amd)
- Epyc 7542 Firmware (Amd)
- Epyc 7552 Firmware (Amd)
- Epyc 7642 Firmware (Amd)
- Epyc 7662 Firmware (Amd)
- Epyc 7702 Firmware (Amd)
- Epyc 7702p Firmware (Amd)
- Epyc 7742 Firmware (Amd)
- Epyc 7f32 Firmware (Amd)
- Epyc 7f52 Firmware (Amd)
- Epyc 7f72 Firmware (Amd)
- Epyc 7h12 Firmware (Amd)
- Ryzen 3000 Series Desktop Processors Matisse Am4 (Amd)
- Ryzen 3 3100 Firmware (Amd)
- Ryzen 3 3300x Firmware (Amd)
- Ryzen 3 4300g Firmware (Amd)
- Ryzen 3 4300ge Firmware (Amd)
- Ryzen 3 5300u Firmware (Amd)
- Ryzen 3 7320u Firmware (Amd)
- Ryzen 3 Pro 4200g Firmware (Amd)
- Ryzen 3 Pro 4350g Firmware (Amd)
- Ryzen 3 Pro 4350ge Firmware (Amd)
- Ryzen 3 Pro 4450u Firmware (Amd)
- Ryzen 4000 Series Mobile Processors With Radeon Graphics Renoir (Amd)
- Ryzen 5000 Series Mobile Processors With Radeon Graphics Lucienne (Amd)
- Ryzen 5 3500 Firmware (Amd)
- Ryzen 5 3500x Firmware (Amd)
- Ryzen 5 3600 Firmware (Amd)
- Ryzen 5 3600x Firmware (Amd)
- Ryzen 5 3600xt Firmware (Amd)
- Ryzen 5 4600g Firmware (Amd)
- Ryzen 5 4600ge Firmware (Amd)
- Ryzen 5 5500u Firmware (Amd)
- Ryzen 5 7520u Firmware (Amd)
- Ryzen 5 Pro 4400g Firmware (Amd)
- Ryzen 5 Pro 4650g Firmware (Amd)
- Ryzen 5 Pro 4650ge Firmware (Amd)
- Ryzen 7020 Series Processors Mendocino Ft6 (Amd)
- Ryzen 7 3700x Firmware (Amd)
- Ryzen 7 3800x Firmware (Amd)
- Ryzen 7 3800xt Firmware (Amd)
- Ryzen 7 4700g Firmware (Amd)
- Ryzen 7 4700ge Firmware (Amd)
- Ryzen 7 5700u Firmware (Amd)
- Ryzen 7 Pro 4750g Firmware (Amd)
- Ryzen 7 Pro 4750ge Firmware (Amd)
- Ryzen 7 Pro 4750u Firmware (Amd)
- Ryzen 9 3900 Firmware (Amd)
- Ryzen 9 3900x Firmware (Amd)
- Ryzen 9 3900xt Firmware (Amd)
- Ryzen 9 3950x Firmware (Amd)
- Ryzen 9 Pro 3900 Firmware (Amd)
- Ryzen Threadripper 3960x Firmware (Amd)
- Ryzen Threadripper 3970x Firmware (Amd)
- Ryzen Threadripper 3990x Firmware (Amd)
- Ryzen Threadripper Pro 3945wx Firmware (Amd)
- Ryzen Threadripper Pro 3955wx Firmware (Amd)
- Ryzen Threadripper Pro 3975wx Firmware (Amd)
- Ryzen Threadripper Pro 3995wx Firmware (Amd)
- Ryzen Threadripper Pro Processors Castle Peak Ws Sp3 (Amd)
- Debian Linux (Debian)
- Xen (Xen)
References
- http://seclists.org/fulldisclosure/2023/Jul/43
- http://www.openwall.com/lists/oss-security/2023/07/24/3
- http://www.openwall.com/lists/oss-security/2023/07/25/1
- http://www.openwall.com/lists/oss-security/2023/07/25/12
- http://www.openwall.com/lists/oss-security/2023/07/25/13
- http://www.openwall.com/lists/oss-security/2023/07/25/14
- http://www.openwall.com/lists/oss-security/2023/07/25/15
- http://www.openwall.com/lists/oss-security/2023/07/25/16
- http://www.openwall.com/lists/oss-security/2023/07/25/17
- http://www.openwall.com/lists/oss-security/2023/07/25/5
- http://www.openwall.com/lists/oss-security/2023/07/25/6
- http://www.openwall.com/lists/oss-security/2023/07/26/1
- http://www.openwall.com/lists/oss-security/2023/07/31/2
- http://www.openwall.com/lists/oss-security/2023/08/08/6
- http://www.openwall.com/lists/oss-security/2023/08/08/7
- http://www.openwall.com/lists/oss-security/2023/08/08/8
- http://www.openwall.com/lists/oss-security/2023/08/16/4
- http://www.openwall.com/lists/oss-security/2023/08/16/5
- http://www.openwall.com/lists/oss-security/2023/09/22/11
- http://www.openwall.com/lists/oss-security/2023/09/22/9
- http://www.openwall.com/lists/oss-security/2023/09/25/4
- http://www.openwall.com/lists/oss-security/2023/09/25/7
- http://xenbits.xen.org/xsa/advisory-433.html
- https://cmpxchg8b.com/zenbleed.html
- https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
- https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html
- https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CP6WQO3CDPLE5O635N7TAL5K…
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBV…
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD2G74BXS2SWOE3FIQJ6X76S…
