Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20593

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 5.5, requiring local system access to exploit with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), for affected systems. Impacting 140 products from xen, from debian, from amd and 137 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-07-24T20:15:10.237

Last Modified

2025-02-13T17:16:01.713

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-Other
Type: Secondary
CWE-209

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	xen	xen	4.14.0	Yes
Operating System	xen	xen	4.15.0	Yes
Operating System	xen	xen	4.16.0	Yes
Operating System	xen	xen	4.17.0	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	debian	debian_linux	11.0	Yes
Operating System	debian	debian_linux	12.0	Yes
Operating System	amd	ryzen_3_3100_firmware	-	Yes
Hardware	amd	ryzen_3_3100	-	No
Operating System	amd	ryzen_3_3300x_firmware	-	Yes
Hardware	amd	ryzen_3_3300x	-	No
Operating System	amd	ryzen_5_3500_firmware	-	Yes
Hardware	amd	ryzen_5_3500	-	No
Operating System	amd	ryzen_5_3500x_firmware	-	Yes
Hardware	amd	ryzen_5_3500x	-	No
Operating System	amd	ryzen_5_3600_firmware	-	Yes
Hardware	amd	ryzen_5_3600	-	No
Operating System	amd	ryzen_5_3600x_firmware	-	Yes
Hardware	amd	ryzen_5_3600x	-	No
Operating System	amd	ryzen_5_3600xt_firmware	-	Yes
Hardware	amd	ryzen_5_3600xt	-	No
Operating System	amd	ryzen_7_3700x_firmware	-	Yes
Hardware	amd	ryzen_7_3700x	-	No
Operating System	amd	ryzen_7_3800x_firmware	-	Yes
Hardware	amd	ryzen_7_3800x	-	No
Operating System	amd	ryzen_7_3800xt_firmware	-	Yes
Hardware	amd	ryzen_7_3800xt	-	No
Operating System	amd	ryzen_9_3900_firmware	-	Yes
Hardware	amd	ryzen_9_3900	-	No
Operating System	amd	ryzen_9_3900x_firmware	-	Yes
Hardware	amd	ryzen_9_3900x	-	No
Operating System	amd	ryzen_9_3900xt_firmware	-	Yes
Hardware	amd	ryzen_9_3900xt	-	No
Operating System	amd	ryzen_9_3950x_firmware	-	Yes
Hardware	amd	ryzen_9_3950x	-	No
Operating System	amd	ryzen_9_pro_3900_firmware	-	Yes
Hardware	amd	ryzen_9_pro_3900	-	No
Operating System	amd	ryzen_threadripper_pro_3995wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3995wx	-	No
Operating System	amd	ryzen_threadripper_pro_3975wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3975wx	-	No
Operating System	amd	ryzen_threadripper_pro_3955wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3955wx	-	No
Operating System	amd	ryzen_threadripper_pro_3945wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3945wx	-	No
Operating System	amd	ryzen_threadripper_3990x_firmware	-	Yes
Hardware	amd	ryzen_threadripper_3990x	-	No
Operating System	amd	ryzen_threadripper_3970x_firmware	-	Yes
Hardware	amd	ryzen_threadripper_3970x	-	No
Operating System	amd	ryzen_threadripper_3960x_firmware	-	Yes
Hardware	amd	ryzen_threadripper_3960x	-	No
Operating System	amd	ryzen_7_4700g_firmware	-	Yes
Hardware	amd	ryzen_7_4700g	-	No
Operating System	amd	ryzen_7_4700ge_firmware	-	Yes
Hardware	amd	ryzen_7_4700ge	-	No
Operating System	amd	ryzen_5_4600g_firmware	-	Yes
Hardware	amd	ryzen_5_4600g	-	No
Operating System	amd	ryzen_5_4600ge_firmware	-	Yes
Hardware	amd	ryzen_5_4600ge	-	No
Operating System	amd	ryzen_3_4300g_firmware	-	Yes
Hardware	amd	ryzen_3_4300g	-	No
Operating System	amd	ryzen_3_4300ge_firmware	-	Yes
Hardware	amd	ryzen_3_4300ge	-	No
Operating System	amd	ryzen_3_pro_4450u_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4450u	-	No
Operating System	amd	ryzen_3_pro_4350ge_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4350ge	-	No
Operating System	amd	ryzen_3_pro_4350g_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4350g	-	No
Operating System	amd	ryzen_3_pro_4200g_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4200g	-	No
Operating System	amd	ryzen_5_pro_4650ge_firmware	-	Yes
Hardware	amd	ryzen_5_pro_4650ge	-	No
Operating System	amd	ryzen_5_pro_4650g_firmware	-	Yes
Hardware	amd	ryzen_5_pro_4650g	-	No
Operating System	amd	ryzen_5_pro_4400g_firmware	-	Yes
Hardware	amd	ryzen_5_pro_4400g	-	No
Operating System	amd	ryzen_7_pro_4750u_firmware	-	Yes
Hardware	amd	ryzen_7_pro_4750u	-	No
Operating System	amd	ryzen_7_pro_4750ge_firmware	-	Yes
Hardware	amd	ryzen_7_pro_4750ge	-	No
Operating System	amd	ryzen_7_pro_4750g_firmware	-	Yes
Hardware	amd	ryzen_7_pro_4750g	-	No
Operating System	amd	ryzen_7_5700u_firmware	-	Yes
Hardware	amd	ryzen_7_5700u	-	No
Operating System	amd	ryzen_5_5500u_firmware	-	Yes
Hardware	amd	ryzen_5_5500u	-	No
Operating System	amd	ryzen_3_5300u_firmware	-	Yes
Hardware	amd	ryzen_3_5300u	-	No
Operating System	amd	ryzen_5_7520u_firmware	-	Yes
Hardware	amd	ryzen_5_7520u	-	No
Operating System	amd	ryzen_3_7320u_firmware	-	Yes
Hardware	amd	ryzen_3_7320u	-	No
Operating System	amd	athlon_gold_7220u_firmware	-	Yes
Hardware	amd	athlon_gold_7220u	-	No
Operating System	amd	epyc_7232p_firmware	-	Yes
Hardware	amd	epyc_7232p	-	No
Operating System	amd	epyc_7302p_firmware	-	Yes
Hardware	amd	epyc_7302p	-	No
Operating System	amd	epyc_7402p_firmware	-	Yes
Hardware	amd	epyc_7402p	-	No
Operating System	amd	epyc_7502p_firmware	-	Yes
Hardware	amd	epyc_7502p	-	No
Operating System	amd	epyc_7702p_firmware	-	Yes
Hardware	amd	epyc_7702p	-	No
Operating System	amd	epyc_7252_firmware	-	Yes
Hardware	amd	epyc_7252	-	No
Operating System	amd	epyc_7262_firmware	-	Yes
Hardware	amd	epyc_7262	-	No
Operating System	amd	epyc_7272_firmware	-	Yes
Hardware	amd	epyc_7272	-	No
Operating System	amd	epyc_7282_firmware	-	Yes
Hardware	amd	epyc_7282	-	No
Operating System	amd	epyc_7302_firmware	-	Yes
Hardware	amd	epyc_7302	-	No
Operating System	amd	epyc_7352_firmware	-	Yes
Hardware	amd	epyc_7352	-	No
Operating System	amd	epyc_7402_firmware	-	Yes
Hardware	amd	epyc_7402	-	No
Operating System	amd	epyc_7452_firmware	-	Yes
Hardware	amd	epyc_7452	-	No
Operating System	amd	epyc_7502_firmware	-	Yes
Hardware	amd	epyc_7502	-	No
Operating System	amd	epyc_7532_firmware	-	Yes
Hardware	amd	epyc_7532	-	No
Operating System	amd	epyc_7542_firmware	-	Yes
Hardware	amd	epyc_7542	-	No
Operating System	amd	epyc_7552_firmware	-	Yes
Hardware	amd	epyc_7552	-	No
Operating System	amd	epyc_7642_firmware	-	Yes
Hardware	amd	epyc_7642	-	No
Operating System	amd	epyc_7662_firmware	-	Yes
Hardware	amd	epyc_7662	-	No
Operating System	amd	epyc_7702_firmware	-	Yes
Hardware	amd	epyc_7702	-	No
Operating System	amd	epyc_7742_firmware	-	Yes
Hardware	amd	epyc_7742	-	No
Operating System	amd	epyc_7h12_firmware	-	Yes
Hardware	amd	epyc_7h12	-	No
Operating System	amd	epyc_7f32_firmware	-	Yes
Hardware	amd	epyc_7f32	-	No
Operating System	amd	epyc_7f52_firmware	-	Yes
Hardware	amd	epyc_7f52	-	No
Operating System	amd	epyc_7f72_firmware	-	Yes
Hardware	amd	epyc_7f72	-	No

References

http://seclists.org/fulldisclosure/2023/Jul/43 Not Applicable ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/24/3 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/1 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/12 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/13 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/14 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/15 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/16 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/17 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/5 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/6 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/26/1 Mailing List, Mitigation, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/31/2 Mailing List, Mitigation, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/08/6 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/08/7 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/08/8 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/16/4 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/16/5 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/22/11 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/22/9 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/25/4 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/25/7 ([email protected])
http://xenbits.xen.org/xsa/advisory-433.html Mitigation, Patch, Vendor Advisory ([email protected])
https://cmpxchg8b.com/zenbleed.html Exploit ([email protected])
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List ([email protected])
https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/ ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/ ([email protected])
https://security.netapp.com/advisory/ntap-20240531-0004/ ([email protected])
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 Vendor Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5459 Third Party Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5461 Third Party Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5462 Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2023/Jul/43 Not Applicable (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/24/3 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/12 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/13 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/14 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/15 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/16 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/17 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/5 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/6 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/26/1 Mailing List, Mitigation, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/31/2 Mailing List, Mitigation, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/08/6 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/08/7 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/08/8 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/16/4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/16/5 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/22/11 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/22/9 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/25/4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/25/7 (af854a3a-2127-422b-91ae-364da2661108)
http://xenbits.xen.org/xsa/advisory-433.html Mitigation, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cmpxchg8b.com/zenbleed.html Exploit (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/ (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240531-0004/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5459 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5461 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5462 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For xen's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.