CVEvulnerability

CVE-2023-20593

5.5 MEDIUM Published 2023-07-24 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2023-07-24
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-209

Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Affected configurations

• xen xen 4.14.0 • xen xen 4.15.0 • xen xen 4.16.0 • xen xen 4.17.0 • debian debian linux 10.0 • debian debian linux 11.0 • debian debian linux 12.0 • amd ryzen 3 3100 firmware • amd ryzen 3 3300x firmware • amd ryzen 5 3500 firmware • amd ryzen 5 3500x firmware • amd ryzen 5 3600 firmware • amd ryzen 5 3600x firmware • amd ryzen 5 3600xt firmware • amd ryzen 7 3700x firmware • amd ryzen 7 3800x firmware • amd ryzen 7 3800xt firmware • amd ryzen 9 3900 firmware • amd ryzen 9 3900x firmware • amd ryzen 9 3900xt firmware • amd ryzen 9 3950x firmware • amd ryzen 9 pro 3900 firmware • amd ryzen threadripper pro 3995wx firmware • amd ryzen threadripper pro 3975wx firmware • amd ryzen threadripper pro 3955wx firmware • amd ryzen threadripper pro 3945wx firmware • amd ryzen threadripper 3990x firmware • amd ryzen threadripper 3970x firmware • amd ryzen threadripper 3960x firmware • amd ryzen 7 4700g firmware • amd ryzen 7 4700ge firmware • amd ryzen 5 4600g firmware • amd ryzen 5 4600ge firmware • amd ryzen 3 4300g firmware • amd ryzen 3 4300ge firmware • amd ryzen 3 pro 4450u firmware • amd ryzen 3 pro 4350ge firmware • amd ryzen 3 pro 4350g firmware • amd ryzen 3 pro 4200g firmware • amd ryzen 5 pro 4650ge firmware • amd ryzen 5 pro 4650g firmware • amd ryzen 5 pro 4400g firmware • amd ryzen 7 pro 4750u firmware • amd ryzen 7 pro 4750ge firmware • amd ryzen 7 pro 4750g firmware • amd ryzen 7 5700u firmware • amd ryzen 5 5500u firmware • amd ryzen 3 5300u firmware • amd ryzen 5 7520u firmware • amd ryzen 3 7320u firmware • amd athlon gold 7220u firmware • amd epyc 7232p firmware • amd epyc 7302p firmware • amd epyc 7402p firmware • amd epyc 7502p firmware • amd epyc 7702p firmware • amd epyc 7252 firmware • amd epyc 7262 firmware • amd epyc 7272 firmware • amd epyc 7282 firmware … and 16 more

Weakness · CWE (1)

CWE-209 Generation of Error Message Containing Sensitive Information weakness

References

http://seclists.org/fulldisclosure/2023/Jul/43 Not Applicable
http://www.openwall.com/lists/oss-security/2023/07/24/3 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/1 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/12 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/13 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/14 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/15 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/16 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/17 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/5 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/6 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/26/1 Mailing List, Mitigation, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/07/31/2 Mailing List, Mitigation, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/08/08/6 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/08/7 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/08/8 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/16/4 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/16/5 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/22/11 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/22/9 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/25/4 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/25/7 www.openwall.com
http://xenbits.xen.org/xsa/advisory-433.html Mitigation, Patch, Vendor Advisory
https://cmpxchg8b.com/zenbleed.html Exploit
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List
https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html lists.debian.org
https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/ lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/ lists.fedoraproject.org
https://security.netapp.com/advisory/ntap-20240531-0004/ security.netapp.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 Vendor Advisory
https://www.debian.org/security/2023/dsa-5459 Third Party Advisory
https://www.debian.org/security/2023/dsa-5461 Third Party Advisory
https://www.debian.org/security/2023/dsa-5462 Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43 Not Applicable
http://www.openwall.com/lists/oss-security/2023/07/24/3 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/1 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/12 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/13 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/14 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/15 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/16 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/17 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/5 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/6 Mailing List
http://www.openwall.com/lists/oss-security/2023/07/26/1 Mailing List, Mitigation, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/07/31/2 Mailing List, Mitigation, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/08/08/6 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/08/7 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/08/8 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/16/4 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/08/16/5 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/22/11 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/22/9 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/25/4 www.openwall.com
http://www.openwall.com/lists/oss-security/2023/09/25/7 www.openwall.com
http://xenbits.xen.org/xsa/advisory-433.html Mitigation, Patch, Vendor Advisory
https://cmpxchg8b.com/zenbleed.html Exploit
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List
https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html lists.debian.org
https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/ lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/ lists.fedoraproject.org
https://security.netapp.com/advisory/ntap-20240531-0004/ security.netapp.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 Vendor Advisory
https://www.debian.org/security/2023/dsa-5459 Third Party Advisory
https://www.debian.org/security/2023/dsa-5461 Third Party Advisory
https://www.debian.org/security/2023/dsa-5462 Third Party Advisory

CVE-2023-20593

Description

Affected configurations

Related

Weakness · CWE (1)

References