CVE-2023-20593

Katalog CVE

CVSS 5.5 · Medium EPSS 5,2%

Kerentanan Generation of Error Message Containing Sensitive Information pada xen, debian linux +53 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Rincian

Terbit di NVD

24 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-209: Generation of Error Message Containing Sensitive Information

EPSS (30 hari)

5,2% peluang dieksploitasi; lebih tinggi dari 92,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 76 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• http://xenbits.xen.org/xsa/advisory-433.html mitigasi · patch · advisory vendor
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 advisory vendor
• http://www.openwall.com/lists/oss-security/2023/07/26/1 mailing list · mitigasi · patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/07/31/2 mailing list · mitigasi · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5459 advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5461 advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5462 advisory pihak ketiga
• https://cmpxchg8b.com/zenbleed.html exploit
• http://seclists.org/fulldisclosure/2023/Jul/43 not applicable
• http://www.openwall.com/lists/oss-security/2023/07/24/3 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/1 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/12 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/13 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/14 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/15 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/16 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/17 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/5 mailing list
• http://www.openwall.com/lists/oss-security/2023/07/25/6 mailing list
• http://www.openwall.com/lists/oss-security/2023/08/08/6
• http://www.openwall.com/lists/oss-security/2023/08/08/7
• http://www.openwall.com/lists/oss-security/2023/08/08/8
• http://www.openwall.com/lists/oss-security/2023/08/16/4
• http://www.openwall.com/lists/oss-security/2023/08/16/5