CVE-2023-20588

Aliases:ALPINE-CVE-2023-20588UBUNTU-CVE-2023-20588DEBIAN-CVE-2023-20588
Advisory lineage Upstream: 0 Downstream: 46
Modified
Published: 08 Aug 2023, 17:06
Last modified:17 Oct 2024, 14:23

Vulnerability Summary

Overall Risk (default)
low
24/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
11.32% MEDIUM
11% probability +3.54%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Aug 2023, 17:06
Published
Vulnerability first disclosed
17 Oct 2024, 14:23
Last Modified
Vulnerability information updated

Description

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVSS Metrics

  • v3.1MEDIUMScore: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Trends

Current EPSS score: 11.32% Percentile: 96%

Techniques & Countermeasures

  • CWE-369Divide By Zero

    The product divides a value by zero.

Affected Systems

  • amdathlon_gold_3150g_firmware

    na

  • amdathlon_gold_3150ge_firmware

    na

  • amdathlon_gold_pro_3150g_firmware

    na

  • amdathlon_gold_pro_3150ge_firmware

    na

  • amdathlon_pro_300ge_firmware

    na

  • amdathlon_silver_3050ge_firmware

    na

  • amdathlon_silver_pro_3125ge_firmware

    na

  • amdathlon™ 3000 series processors with radeon™ graphics

    various

  • amdathlon™ pro 3000 series processors with radeon™ vega graphics

    Various

  • amdepyc_7251_firmware

    na

  • amdepyc_7261_firmware

    na

  • amdepyc_7281_firmware

    na

  • amdepyc_7301_firmware

    na

  • amdepyc_7351_firmware

    na

  • amdepyc_7351p_firmware

    na

  • amdepyc_7371_firmware

    na

  • amdepyc_7401_firmware

    na

  • amdepyc_7401p_firmware

    na

  • amdepyc_7451_firmware

    na

  • amdepyc_7501_firmware

    na

  • amdepyc_7551_firmware

    na

  • amdepyc_7551p_firmware

    na

  • amdepyc_7571_firmware

    na

  • amdepyc_7601_firmware

    na

  • amdepyc™ 7001 processors

    various

  • amdryzen_3_3200g_firmware

    na

  • amdryzen_3_3200ge_firmware

    na

  • amdryzen_3_pro_3200g_firmware

    na

  • amdryzen_3_pro_3200ge_firmware

    na

  • amdryzen_5_3400g_firmware

    na

  • amdryzen_5_pro_3350g_firmware

    na

  • amdryzen_5_pro_3350ge_firmware

    na

  • amdryzen_5_pro_3400g_firmware

    na

  • amdryzen_5_pro_3400ge_firmware

    na

  • amdryzen™ 3000 series processors with radeon™ graphics

    various

  • amdryzen™ pro 3000 series processors with radeon™ vega graphics

    various

  • alpinexen

    < 4.15.5-r2 | < 4.16.5-r2 | < 4.16.5-r2 | < 4.17.2-r2 | < 4.17.2-r2 | < 4.17.2-r2 | < 4.17.2-r2 | < 4.17.2-r2 | < 4.17.2-r2 | < 4.17.2-r2

  • debianlinux

    < 5.10.197-1 | < 6.1.52-1 | < 6.4.13-1 | < 6.4.13-1

  • debianxen

    all | < 4.17.2+76-ge1f9cb16e2-1~deb12u1 | < 4.17.2+55-g0b56bed864-1 | < 4.17.2+55-g0b56bed864-1

  • ubuntulinux

    all | < 4.4.0-250.284 | < 4.15.0-221.232 | < 5.4.0-163.180 | < 5.15.0-84.93

  • ubuntulinux-allwinner-5.19

    all

  • ubuntulinux-aws

    < 4.4.0-1127.133 | < 4.4.0-1164.179 | < 4.15.0-1164.177 | < 5.4.0-1110.119 | < 5.15.0-1045.50

  • ubuntulinux-aws-5.0

    all

  • ubuntulinux-aws-5.11

    all

  • ubuntulinux-aws-5.13

    all

  • ubuntulinux-aws-5.15

    < 5.15.0-1045.50~20.04.1

  • ubuntulinux-aws-5.19

    all

  • ubuntulinux-aws-5.3

    all

  • ubuntulinux-aws-5.4

    < 5.4.0-1110.119~18.04.1

  • ubuntulinux-aws-5.8

    all

Showing first 50 affected entries in server-rendered view.

References (46)