What is CVE-2023-20569?

CVE-2023-20569 is a vulnerability in Amd 1st Gen Epyc™ Processors. Published 2023-08-08.

Is CVE-2023-20569 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Amd 1st Gen Epyc™ Processors

CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclo…

EPSS: 0.021 (84.3th percentile) — read the EPSS interpretation.

Affected products

Amd 1st Gen Epyc™ Processors — versions various
Amd 2nd Gen Epyc™ Processors — versions various
Amd 3rd Gen Epyc™ Processors — versions various
Amd 4th Gen Epyc™ Processors — versions various
Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics — versions various
Amd Athlon™ 3000 Series Processors With Radeon™ Graphics — versions various
Amd Athlon™ Pro 3000 Series Processors With Radeon™ Vega Graphics — versions various
Amd Ryzen™ 3000 Series Desktop Processors — versions various
Amd Ryzen™ 3000 Series Desktop Processors With Radeon™ Graphics — versions various
Amd Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics — versions various

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2023-20569?: CVE-2023-20569 is a vulnerability in Amd 1st Gen Epyc™ Processors. Published 2023-08-08.
Is CVE-2023-20569 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.