PT-2023-4327 · Amd+6 · Amd Epyc 7001+8

Boris Koepf + 4 · Published 2023-08-08 · Updated 2024-06-15 · CVE-2023-20588

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AMD processors (affected versions not specified)

Description A division-by-zero error on some AMD processors can potentially return speculative data, resulting in loss of confidentiality. The vulnerability is related to the handling of exceptions, specifically the "divide by zero" exception, and can lead to the leakage of sensitive information. The issue is associated with the AMD Zen1 microarchitecture, including processors such as AMD EPYC 7001, AMD Athlon 3000, and AMD Ryzen 3000 with GPU Radeon.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALT-PU-2023-7439

BDU:2023-04662

CVE-2023-20588

DLA-3623-1

DSA-5480-1

DSA-5492-1

OESA-2023-1666

OESA-2023-1667

OESA-2023-1668

OESA-2023-1669

OESA-2023-1670

OPENSUSE-SU-2023_3599-1

OPENSUSE-SU-2023_3599-2

OPENSUSE-SU-2023_3600-1

OPENSUSE-SU-2023_3600-2

OPENSUSE-SU-2023_3656-1

OPENSUSE-SU-2023_3680-1

OPENSUSE-SU-2023_3682-1

OPENSUSE-SU-2023_3683-1

OPENSUSE-SU-2023_3683-2

OPENSUSE-SU-2023_3684-1

OPENSUSE-SU-2023_3704-1

OPENSUSE-SU-2023_3704-2

OPENSUSE-SU-2023_3831-1

OPENSUSE-SU-2023_3832-1

OPENSUSE-SU-2023_3964-1

OPENSUSE-SU-2023_3969-1

OPENSUSE-SU-2023_3971-1

OPENSUSE-SU-2023_3988-1

OPENSUSE-SU-2023_4475-1

OPENSUSE-SU-2023_4476-1

OPENSUSE-SU-2024:13257-1

SUSE-SU-2023:3599-1

SUSE-SU-2023:3599-2

SUSE-SU-2023:3600-1

SUSE-SU-2023:3600-2

SUSE-SU-2023:3601-1

SUSE-SU-2023:3656-1

SUSE-SU-2023:3680-1

SUSE-SU-2023:3681-1

SUSE-SU-2023:3682-1

SUSE-SU-2023:3684-1

SUSE-SU-2023:3687-1

SUSE-SU-2023:3705-1

SUSE-SU-2023:3785-1

SUSE-SU-2023:3831-1

SUSE-SU-2023:3832-1

SUSE-SU-2023:3894-1

SUSE-SU-2023:3895-1

SUSE-SU-2023:3902-1

SUSE-SU-2023:3903-1

SUSE-SU-2023:3964-1

SUSE-SU-2023:3969-1

SUSE-SU-2023:3971-1

SUSE-SU-2023:3988-1

SUSE-SU-2023:4028-1

SUSE-SU-2023:4475-1

SUSE-SU-2023:4476-1

SUSE-SU-2023_3831-1

SUSE-SU-2023_3832-1

SUSE-SU-2023_3903-1

SUSE-SU-2023_4475-1

SUSE-SU-2023_4476-1

USN-6383-1

USN-6384-1

USN-6386-1

USN-6386-2

USN-6386-3

USN-6387-1

USN-6387-2

USN-6466-1

USN-6577-1

USN-6602-1

USN-6604-1

USN-6604-2

Affected Products

Alt Linux

Amd Athlon 3000

Amd Epyc 7001

Amd Ryzen 3000

Astra Linux

Debian

Linuxmint

Suse

Ubuntu

References · 387

• 🔥 https://github.com/lrh2000/CVE-2023-2002 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-3338-DECPwn · Exploit
• 🔥 https://github.com/rockrid3r/CVE-2023-5178 · Exploit
• https://ubuntu.com/security/notices/USN-6466-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32249 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20588 · Security Note
• https://osv.dev/vulnerability/CVE-2023-20588 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2156 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3863 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3894-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3601-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38427 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6384-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6466-1 · Vendor Advisory