Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2023-20572

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Picasso-FP5 1.0.1.1unaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Pollock-FT5 1.0.0.7unaffected

AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics

Default version status: affected

  • Cezanne-FP6 1.0.1.0unaffected

AMD AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics

Default version status: affected

  • Cezanne-FP6 1.0.1.0unaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • Renoir-FP6 1.0.0.Dunaffected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics

Default version status: affected

  • Rembrandt-FP7 1.0.0.Aunaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6 1.0.0.6unaffected

AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected
  • ComboAM4PI 1.0.0.Funaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 8000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.0.0.7aunaffected

AMD AMD Ryzen™ 7000 Series Desktop Processors

Default version status: affected

  • ComboAM5 1.0.0.7aunaffected

AMD AMD Ryzen™ Threadripper™ 3000 Series Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Eunaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.9unaffected

AMD AMD Ryzen™ Threadripper™ 7000 Processors

Default version status: affected

  • StormPeakPI-SP6 1.1.0.0cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 7000WX-Series Processors

Default version status: affected

  • StormPeakPI-SP6 1.0.0.1eunaffected

References