Vulnerability in Amd Athlon™ 3000 Series Processors With Radeon™ Graphics
CVE-2023-20588
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
EPSS: 0.043 (89.0th percentile) — read the EPSS interpretation.
Affected products
- Amd Athlon™ 3000 Series Processors With Radeon™ Graphics — versions various
- Amd Athlon™ Pro 3000 Series Processors With Radeon™ Vega Graphics — versions Various
- Amd Epyc™ 7001 Processors — versions various
- Amd Ryzen™ 3000 Series Processors With Radeon™ Graphics — versions various
- Amd Ryzen™ Pro 3000 Series Processors With Radeon™ Vega Graphics — versions various
Public proof-of-concept exploits
References
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007 (vendor-advisory)
- www.debian.org/security/2023/dsa-5480
- www.debian.org/security/2023/dsa-5492
- www.openwall.com/lists/oss-security/2023/09/25/3
- www.openwall.com/lists/oss-security/2023/09/25/4
- xenbits.xen.org/xsa/advisory-439.html
- www.openwall.com/lists/oss-security/2023/09/25/5
- www.openwall.com/lists/oss-security/2023/09/25/8
- www.openwall.com/lists/oss-security/2023/09/25/7
- www.openwall.com/lists/oss-security/2023/09/26/5
Frequently asked questions
- What is CVE-2023-20588?
- CVE-2023-20588 is a vulnerability in Amd Athlon™ 3000 Series Processors With Radeon™ Graphics. Published 2023-08-08.
- Is CVE-2023-20588 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.