PT-2020-1714 · Amd · Amd Cpus

Published 2020-03-07 · Updated 2020-03-07

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AMD CPU (affected versions not specified)

Description The issue is related to the implementation of a way predictor mechanism in the L1D cache of AMD CPUs. It allows an attacker to access memory on the same physical CPU core by exploiting the fact that accessing the same memory cell via a different virtual address can evict the cell from the L1D cache. This could potentially enable a remote attacker to access memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2020-00947

Affected Products

Amd Cpus

References · 4

• https://bdu.fstec.ru/vul/2020-00947 · Security Note
• https://amd.com/en/corporate/product-security · Note
• https://opennet.ru/opennews/art.shtml?num=52501 · Note
• https://mlq.me/download/takeaway.pdf · Note