PT-2022-2972 · Amd · Amd Processors

Abhishek Chakraborty + 12 · Published 2022-06-14 · Updated 2022-06-29 · CVE-2022-23823

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:H/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions AMD processors (affected versions not specified)

Description A potential issue in AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack, potentially enabling information disclosure. The vulnerability is related to the implementation of Dynamic Voltage and Frequency Scaling (DVFS) in AMD processor microcode, which is associated with inadequate protection of physical side channels. Exploitation of the issue may allow a remote attacker to gain unauthorized access to protected information using a side channel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Side Channel Attack

Weakness Enumeration

CWE-400

CWE-203

CWE-1300

Related Identifiers

BDU:2022-03602

CVE-2022-23823

Affected Products

Amd Processors

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2022-23823 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1038 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03602 · Security Note
• https://t.me/tmfeed/143764 · Telegram Post
• https://t.me/opennews/10215 · Telegram Post
• https://t.me/echeloneyes/359 · Telegram Post
• https://access.redhat.com/security/cve/cve-2022-23823 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2097181 · Note
• https://securitylab.ru/news/532295.php · Note
• https://hertzbleed.com · Note
• https://comss.ru/page.php?id=10622 · Note
• https://vuldb.com/ru/?id.202200 · Note
• https://t.me/true_secator/3062 · Telegram Post