Vulnerability in Amd 2nd Gen Epyc™
CVE-2023-20524
An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity.
EPSS: 0.004 (60.0th percentile) — read the EPSS interpretation.
Affected products
- Amd 2nd Gen Epyc™ — versions various
- Amd 3rd Gen Epyc™ — versions various
References
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 (vendor-advisory)