CVE-2023-20569

Katalog CVE

CVSS 4.7 · Medium EPSS 7,3%

Kerentanan Observable Discrepancy pada fedoraproject fedora, debian linux +55 lainnya. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

Rincian

Terbit di NVD

8 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

7,3% peluang dieksploitasi; lebih tinggi dari 94,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 160 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 advisory vendor
• http://xenbits.xen.org/xsa/advisory-434.html advisory pihak ketiga
• https://comsec.ethz.ch/research/microarch/inception/ exploit · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4... advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE... mailing list · advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5475 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/08/08/4 mailing list
• https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html mailing list
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KET... mailing list
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKK3IA63LSKM4EC... mailing list
• https://security.netapp.com/advisory/ntap-20240605-0006/
• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html