CVE-2023-20588: Speculative Leaks

Modified

AliasesALPINE-CVE-2023-20588UBUNTU-CVE-2023-20588DEBIAN-CVE-2023-20588

Published 08-08-2023Last modified 17-10-2024

Vulnerability summary

CVE-2023-20588 is a medium (CVSS 5.5) Divide By Zero vulnerability in amd athlon_gold_3150g_firmware. EPSS estimates a 11.15% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.5/10

010

Medium · v3.1 (NVD)

EPSS score

11.15%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

08-08-2023
PublishedVulnerability first disclosed.
17-10-2024
Last modifiedVulnerability information updated.

Description

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVSS metrics

4 scores · 4 sources · 1 version

v3.15.5

EPSS trend

Probability

11.15%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 11.15% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-369Divide By ZeroThe product divides a value by zero.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu105 products

linuxAll versions (No fix recorded) | < 4.4.0-250.284 | < 4.15.0-221.232 | < 5.4.0-163.180 | < 5.15.0-84.93
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 4.4.0-1127.133 | < 4.4.0-1164.179 | < 4.15.0-1164.177 | < 5.4.0-1110.119 | < 5.15.0-1045.50
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1045.50~20.04.1
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1110.119~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2< 6.2.0-1012.12~22.04.1
linux-aws-fips< 4.15.0-2103.109 | All versions (No fix recorded) | < 5.4.0-1110.119+fips1
linux-aws-hwe< 4.15.0-1164.177~16.04.1
linux-azure< 4.15.0-1173.188~14.04.1 | < 4.15.0-1173.188~16.04.1 | All versions (No fix recorded) | < 5.4.0-1116.123 | < 5.15.0-1047.54
linux-azure-4.15< 4.15.0-1173.188
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1047.54~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1116.123~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.2< 6.2.0-1012.12~22.04.1
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded) | < 5.15.0-1047.54.1
linux-azure-fde-5.15< 5.15.0-1114.123~20.04.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fips< 4.15.0-2082.88 | All versions (No fix recorded) | < 5.4.0-1116.123+fips1
linux-bluefield< 5.4.0-1071.77 | < 5.15.0-1024.26
linux-fips< 4.4.0-1097.104 | All versions (No fix recorded) | < 4.15.0-1119.130 | < 5.4.0-1085.94
linux-gcp< 4.15.0-1158.175~16.04.1 | All versions (No fix recorded) | < 5.4.0-1113.122 | < 5.15.0-1042.50
linux-gcp-4.15< 4.15.0-1158.175
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1042.50~20.04.1
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1113.122~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2< 6.2.0-1014.14~22.04.1
linux-gcp-fips< 4.15.0-2066.71 | All versions (No fix recorded) | < 5.4.0-1113.122+fips1
linux-gkeAll versions (No fix recorded) | < 5.15.0-1042.47
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1077.81 | < 5.15.0-1028.33
linux-gkeop-5.15< 5.15.0-1028.33~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hwe< 4.15.0-221.232~16.04.1 | All versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-84.93~20.04.1
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4< 5.4.0-163.180~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2< 6.2.0-33.33~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1057.62 | < 5.15.0-1038.41
linux-ibm-5.15< 5.15.0-1038.41~20.04.1
linux-ibm-5.4< 5.4.0-1057.62~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1039.41
linux-intel-iotg< 5.15.0-1040.46
linux-intel-iotg-5.15< 5.15.0-1040.46~20.04.1
linux-iot< 5.4.0-1022.23
linux-kvm< 4.4.0-1128.138 | < 4.15.0-1148.153 | < 5.4.0-1099.105 | < 5.15.0-1042.47
linux-lowlatency< 5.15.0-84.93
linux-lowlatency-hwe-5.15< 5.15.0-84.93~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2< 6.2.0-1013.13~22.04.1
linux-lts-xenial< 4.4.0-250.284~14.04.1
linux-nvidia< 5.15.0-1033.33
linux-nvidia-6.2< 6.2.0-1011.11
linux-nvidia-tegra< 5.15.0-1018.18
linux-nvidia-tegra-5.15< 5.15.0-1018.18~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1005.5
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1< 6.1.0-1022.22
linux-oracle< 4.15.0-1127.138~16.04.1 | < 4.15.0-1127.138 | < 5.4.0-1109.118 | < 5.15.0-1044.50
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1044.50~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1109.118~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.4.0-1094.105 | < 5.15.0-1038.41
linux-raspi-5.4< 5.4.0-1094.105~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1046.52
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1041.45~20.04.1
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-xilinx-zynqmp< 5.4.0-1030.34 | < 5.15.0-1025.29

Show all 105

Amd36 products

Show all 36

Microsoft13 products

windows_10_1507< 10.0.10240.20345
windows_10_1607< 10.0.14393.6529
windows_10_1809< 10.0.17763.5206
windows_10_21h2< 10.0.19044.3803
windows_10_22h2< 10.0.19045.3803

Show all 13

Debian3 products

linux< 6.1.52-1 | < 6.4.13-1
xen< 4.17.2+76-ge1f9cb16e2-1~deb12u1 | < 4.17.2+55-g0b56bed864-1
debian_linuxEOL10.0 | 11.0 | 12.0

Alpine1 product

xen< 4.15.5-r2 | < 4.16.5-r2 | < 4.17.2-r2

Fedoraproject1 product

fedoraEOL37 | 38 | 39

Xen1 product

xenna

7 vendors · 160 products

References

46 links

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007Vendor Advisory
www.debian.org/security/2023/dsa-5480Third Party Advisory
www.debian.org/security/2023/dsa-5492Third Party Advisory
www.openwall.com/lists/oss-security/2023/09/25/3Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/25/4Mailing ListThird Party Advisory
xenbits.xen.org/xsa/advisory-439.htmlThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/25/5Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/25/8Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/25/7Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/26/5Mailing ListThird Party Advisory

Show all 46 references

www.openwall.com/lists/oss-security/2023/09/26/8Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/26/9Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/09/27/1Mailing ListThird Party Advisory
lists.fedoraproject.org/archives/…Mailing List
lists.fedoraproject.org/archives/…Mailing List
www.openwall.com/lists/oss-security/2023/10/03/14Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/03/9Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/03/15Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/03/12Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/03/13Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/03/16Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/04/1Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/04/2Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/04/4Mailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2023/10/04/3Mailing ListThird Party Advisory
lists.fedoraproject.org/archives/…Mailing List
lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlMailing ListThird Party Advisory
security.netapp.com/advisory/ntap-20240531-0005/
security.alpinelinux.org/vuln/CVE-2023-20588Advisory
ubuntu.com/security/CVE-2023-20588REPORT
www.amd.com/en/resources/product-security/bulletin/amd-sb-7007.htmlREPORT
git.kernel.org/linus/77245f1c3c6495521f6a3af082696ee2f8ce3921REPORT
ubuntu.com/security/notices/USN-6383-1Advisory
ubuntu.com/security/notices/USN-6384-1Advisory
ubuntu.com/security/notices/USN-6386-1Advisory
ubuntu.com/security/notices/USN-6387-1Advisory
ubuntu.com/security/notices/USN-6387-2Advisory
ubuntu.com/security/notices/USN-6386-2Advisory
ubuntu.com/security/notices/USN-6386-3Advisory
ubuntu.com/security/notices/USN-6466-1Advisory
ubuntu.com/security/notices/USN-6577-1Advisory
ubuntu.com/security/notices/USN-6602-1Advisory
ubuntu.com/security/notices/USN-6604-1Advisory
ubuntu.com/security/notices/USN-6604-2Advisory
www.cve.org/CVERecord?id=CVE-2023-20588REPORT
security-tracker.debian.org/tracker/CVE-2023-20588Advisory