PT-2020-1713 · Amd · Amd Cpus

Published 2020-03-07 · Updated 2020-03-07

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AMD CPU (affected versions not specified)

Description The issue is related to a flaw in the implementation of the way predictor mechanism in the L1D cache of AMD CPUs. This flaw is connected to collisions in the hash function used to calculate tags for searching the cache predictor table. Exploitation of this issue could allow a remote attacker to recover encryption keys in vulnerable AES implementations, reduce the effectiveness of ASLR protection, or expose kernel data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

CWE-264

Related Identifiers

BDU:2020-00946

Affected Products

Amd Cpus

References · 4

• https://bdu.fstec.ru/vul/2020-00946 · Security Note
• https://amd.com/en/corporate/product-security · Note
• https://opennet.ru/opennews/art.shtml?num=52501 · Note
• https://mlq.me/download/takeaway.pdf · Note