Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20593

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Published

2023-07-24T20:15:10.237

Last Modified

2025-02-13T17:16:01.713

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-Other
Type: Secondary
CWE-209

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	xen	xen	4.14.0	Yes
Operating System	xen	xen	4.15.0	Yes
Operating System	xen	xen	4.16.0	Yes
Operating System	xen	xen	4.17.0	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	debian	debian_linux	11.0	Yes
Operating System	debian	debian_linux	12.0	Yes
Operating System	amd	ryzen_3_3100_firmware	-	Yes
Hardware	amd	ryzen_3_3100	-	No
Operating System	amd	ryzen_3_3300x_firmware	-	Yes
Hardware	amd	ryzen_3_3300x	-	No
Operating System	amd	ryzen_5_3500_firmware	-	Yes
Hardware	amd	ryzen_5_3500	-	No
Operating System	amd	ryzen_5_3500x_firmware	-	Yes
Hardware	amd	ryzen_5_3500x	-	No
Operating System	amd	ryzen_5_3600_firmware	-	Yes
Hardware	amd	ryzen_5_3600	-	No
Operating System	amd	ryzen_5_3600x_firmware	-	Yes
Hardware	amd	ryzen_5_3600x	-	No
Operating System	amd	ryzen_5_3600xt_firmware	-	Yes
Hardware	amd	ryzen_5_3600xt	-	No
Operating System	amd	ryzen_7_3700x_firmware	-	Yes
Hardware	amd	ryzen_7_3700x	-	No
Operating System	amd	ryzen_7_3800x_firmware	-	Yes
Hardware	amd	ryzen_7_3800x	-	No
Operating System	amd	ryzen_7_3800xt_firmware	-	Yes
Hardware	amd	ryzen_7_3800xt	-	No
Operating System	amd	ryzen_9_3900_firmware	-	Yes
Hardware	amd	ryzen_9_3900	-	No
Operating System	amd	ryzen_9_3900x_firmware	-	Yes
Hardware	amd	ryzen_9_3900x	-	No
Operating System	amd	ryzen_9_3900xt_firmware	-	Yes
Hardware	amd	ryzen_9_3900xt	-	No
Operating System	amd	ryzen_9_3950x_firmware	-	Yes
Hardware	amd	ryzen_9_3950x	-	No
Operating System	amd	ryzen_9_pro_3900_firmware	-	Yes
Hardware	amd	ryzen_9_pro_3900	-	No
Operating System	amd	ryzen_threadripper_pro_3995wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3995wx	-	No
Operating System	amd	ryzen_threadripper_pro_3975wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3975wx	-	No
Operating System	amd	ryzen_threadripper_pro_3955wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3955wx	-	No
Operating System	amd	ryzen_threadripper_pro_3945wx_firmware	-	Yes
Hardware	amd	ryzen_threadripper_pro_3945wx	-	No
Operating System	amd	ryzen_threadripper_3990x_firmware	-	Yes
Hardware	amd	ryzen_threadripper_3990x	-	No
Operating System	amd	ryzen_threadripper_3970x_firmware	-	Yes
Hardware	amd	ryzen_threadripper_3970x	-	No
Operating System	amd	ryzen_threadripper_3960x_firmware	-	Yes
Hardware	amd	ryzen_threadripper_3960x	-	No
Operating System	amd	ryzen_7_4700g_firmware	-	Yes
Hardware	amd	ryzen_7_4700g	-	No
Operating System	amd	ryzen_7_4700ge_firmware	-	Yes
Hardware	amd	ryzen_7_4700ge	-	No
Operating System	amd	ryzen_5_4600g_firmware	-	Yes
Hardware	amd	ryzen_5_4600g	-	No
Operating System	amd	ryzen_5_4600ge_firmware	-	Yes
Hardware	amd	ryzen_5_4600ge	-	No
Operating System	amd	ryzen_3_4300g_firmware	-	Yes
Hardware	amd	ryzen_3_4300g	-	No
Operating System	amd	ryzen_3_4300ge_firmware	-	Yes
Hardware	amd	ryzen_3_4300ge	-	No
Operating System	amd	ryzen_3_pro_4450u_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4450u	-	No
Operating System	amd	ryzen_3_pro_4350ge_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4350ge	-	No
Operating System	amd	ryzen_3_pro_4350g_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4350g	-	No
Operating System	amd	ryzen_3_pro_4200g_firmware	-	Yes
Hardware	amd	ryzen_3_pro_4200g	-	No
Operating System	amd	ryzen_5_pro_4650ge_firmware	-	Yes
Hardware	amd	ryzen_5_pro_4650ge	-	No
Operating System	amd	ryzen_5_pro_4650g_firmware	-	Yes
Hardware	amd	ryzen_5_pro_4650g	-	No
Operating System	amd	ryzen_5_pro_4400g_firmware	-	Yes
Hardware	amd	ryzen_5_pro_4400g	-	No
Operating System	amd	ryzen_7_pro_4750u_firmware	-	Yes
Hardware	amd	ryzen_7_pro_4750u	-	No
Operating System	amd	ryzen_7_pro_4750ge_firmware	-	Yes
Hardware	amd	ryzen_7_pro_4750ge	-	No
Operating System	amd	ryzen_7_pro_4750g_firmware	-	Yes
Hardware	amd	ryzen_7_pro_4750g	-	No
Operating System	amd	ryzen_7_5700u_firmware	-	Yes
Hardware	amd	ryzen_7_5700u	-	No
Operating System	amd	ryzen_5_5500u_firmware	-	Yes
Hardware	amd	ryzen_5_5500u	-	No
Operating System	amd	ryzen_3_5300u_firmware	-	Yes
Hardware	amd	ryzen_3_5300u	-	No
Operating System	amd	ryzen_5_7520u_firmware	-	Yes
Hardware	amd	ryzen_5_7520u	-	No
Operating System	amd	ryzen_3_7320u_firmware	-	Yes
Hardware	amd	ryzen_3_7320u	-	No
Operating System	amd	athlon_gold_7220u_firmware	-	Yes
Hardware	amd	athlon_gold_7220u	-	No
Operating System	amd	epyc_7232p_firmware	-	Yes
Hardware	amd	epyc_7232p	-	No
Operating System	amd	epyc_7302p_firmware	-	Yes
Hardware	amd	epyc_7302p	-	No
Operating System	amd	epyc_7402p_firmware	-	Yes
Hardware	amd	epyc_7402p	-	No
Operating System	amd	epyc_7502p_firmware	-	Yes
Hardware	amd	epyc_7502p	-	No
Operating System	amd	epyc_7702p_firmware	-	Yes
Hardware	amd	epyc_7702p	-	No
Operating System	amd	epyc_7252_firmware	-	Yes
Hardware	amd	epyc_7252	-	No
Operating System	amd	epyc_7262_firmware	-	Yes
Hardware	amd	epyc_7262	-	No
Operating System	amd	epyc_7272_firmware	-	Yes
Hardware	amd	epyc_7272	-	No
Operating System	amd	epyc_7282_firmware	-	Yes
Hardware	amd	epyc_7282	-	No
Operating System	amd	epyc_7302_firmware	-	Yes
Hardware	amd	epyc_7302	-	No
Operating System	amd	epyc_7352_firmware	-	Yes
Hardware	amd	epyc_7352	-	No
Operating System	amd	epyc_7402_firmware	-	Yes
Hardware	amd	epyc_7402	-	No
Operating System	amd	epyc_7452_firmware	-	Yes
Hardware	amd	epyc_7452	-	No
Operating System	amd	epyc_7502_firmware	-	Yes
Hardware	amd	epyc_7502	-	No
Operating System	amd	epyc_7532_firmware	-	Yes
Hardware	amd	epyc_7532	-	No
Operating System	amd	epyc_7542_firmware	-	Yes
Hardware	amd	epyc_7542	-	No
Operating System	amd	epyc_7552_firmware	-	Yes
Hardware	amd	epyc_7552	-	No
Operating System	amd	epyc_7642_firmware	-	Yes
Hardware	amd	epyc_7642	-	No
Operating System	amd	epyc_7662_firmware	-	Yes
Hardware	amd	epyc_7662	-	No
Operating System	amd	epyc_7702_firmware	-	Yes
Hardware	amd	epyc_7702	-	No
Operating System	amd	epyc_7742_firmware	-	Yes
Hardware	amd	epyc_7742	-	No
Operating System	amd	epyc_7h12_firmware	-	Yes
Hardware	amd	epyc_7h12	-	No
Operating System	amd	epyc_7f32_firmware	-	Yes
Hardware	amd	epyc_7f32	-	No
Operating System	amd	epyc_7f52_firmware	-	Yes
Hardware	amd	epyc_7f52	-	No
Operating System	amd	epyc_7f72_firmware	-	Yes
Hardware	amd	epyc_7f72	-	No

References

http://seclists.org/fulldisclosure/2023/Jul/43 Not Applicable ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/24/3 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/1 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/12 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/13 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/14 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/15 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/16 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/17 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/5 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/25/6 Mailing List ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/26/1 Mailing List, Mitigation, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2023/07/31/2 Mailing List, Mitigation, Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/08/6 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/08/7 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/08/8 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/16/4 ([email protected])
http://www.openwall.com/lists/oss-security/2023/08/16/5 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/22/11 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/22/9 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/25/4 ([email protected])
http://www.openwall.com/lists/oss-security/2023/09/25/7 ([email protected])
http://xenbits.xen.org/xsa/advisory-433.html Mitigation, Patch, Vendor Advisory ([email protected])
https://cmpxchg8b.com/zenbleed.html Exploit ([email protected])
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List ([email protected])
https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/ ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/ ([email protected])
https://security.netapp.com/advisory/ntap-20240531-0004/ ([email protected])
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 Vendor Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5459 Third Party Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5461 Third Party Advisory ([email protected])
https://www.debian.org/security/2023/dsa-5462 Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2023/Jul/43 Not Applicable (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/24/3 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/1 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/12 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/13 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/14 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/15 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/16 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/17 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/5 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/25/6 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/26/1 Mailing List, Mitigation, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/07/31/2 Mailing List, Mitigation, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/08/6 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/08/7 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/08/8 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/16/4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/08/16/5 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/22/11 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/22/9 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/25/4 (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2023/09/25/7 (af854a3a-2127-422b-91ae-364da2661108)
http://xenbits.xen.org/xsa/advisory-433.html Mitigation, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cmpxchg8b.com/zenbleed.html Exploit (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/ (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20240531-0004/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5459 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5461 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2023/dsa-5462 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)