{"id":"CVE-2023-20588","state":"PUBLISHED","title":"Speculative Leaks","description":"\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n","publishedAt":"2023-08-08T17:06:30.065Z","updatedAt":"2024-10-17T14:23:18.239Z","severity":null,"assigner":"AMD","products":["AMD EPYC™ 7001 Processors","AMD Athlon™ 3000 Series Processors with Radeon™ Graphics ","AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics","AMD Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics ","AMD Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics"],"affected":[{"vendor":"AMD","product":"EPYC™ 7001 Processors","packageName":" ","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Athlon™ 3000 Series Processors with Radeon™ Graphics ","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Ryzen™ 3000 Series Processors with Radeon™ Graphics","packageName":" ","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics ","defaultStatus":"affected","versions":[{"version":"Various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]}],"references":["https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007","https://www.debian.org/security/2023/dsa-5480","https://www.debian.org/security/2023/dsa-5492","http://www.openwall.com/lists/oss-security/2023/09/25/3","http://www.openwall.com/lists/oss-security/2023/09/25/4","http://xenbits.xen.org/xsa/advisory-439.html","http://www.openwall.com/lists/oss-security/2023/09/25/5","http://www.openwall.com/lists/oss-security/2023/09/25/8","http://www.openwall.com/lists/oss-security/2023/09/25/7","http://www.openwall.com/lists/oss-security/2023/09/26/5","http://www.openwall.com/lists/oss-security/2023/09/26/8","http://www.openwall.com/lists/oss-security/2023/09/26/9","http://www.openwall.com/lists/oss-security/2023/09/27/1","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/","http://www.openwall.com/lists/oss-security/2023/10/03/14","http://www.openwall.com/lists/oss-security/2023/10/03/9","http://www.openwall.com/lists/oss-security/2023/10/03/15","http://www.openwall.com/lists/oss-security/2023/10/03/12","http://www.openwall.com/lists/oss-security/2023/10/03/13","http://www.openwall.com/lists/oss-security/2023/10/03/16","http://www.openwall.com/lists/oss-security/2023/10/04/1","http://www.openwall.com/lists/oss-security/2023/10/04/2","http://www.openwall.com/lists/oss-security/2023/10/04/4","http://www.openwall.com/lists/oss-security/2023/10/04/3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://security.netapp.com/advisory/ntap-20240531-0005/"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/20xxx/CVE-2023-20588.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-20588","state":"PUBLISHED","datePublished":"2023-08-08T17:06:30.065Z","dateUpdated":"2024-10-17T14:23:18.239Z","assignerShortName":"AMD","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateReserved":"2022-10-27T18:53:39.759Z"},"containers":{"cna":{"title":"Speculative Leaks","descriptions":[{"lang":"en","value":"\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n"}],"affected":[{"vendor":"AMD","product":"EPYC™ 7001 Processors","packageName":" ","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Athlon™ 3000 Series Processors with Radeon™ Graphics ","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Ryzen™ 3000 Series Processors with Radeon™ Graphics","packageName":" ","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics ","defaultStatus":"affected","versions":[{"version":"Various ","status":"affected"}],"platforms":["x86"]},{"vendor":"AMD","product":"Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["x86"]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007","tags":["vendor-advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5480"},{"url":"https://www.debian.org/security/2023/dsa-5492"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/3"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/4"},{"url":"http://xenbits.xen.org/xsa/advisory-439.html"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/5"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/8"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/7"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/5"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/8"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/9"},{"url":"http://www.openwall.com/lists/oss-security/2023/09/27/1"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/14"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/9"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/15"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/12"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/13"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/16"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/1"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/2"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/4"},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/3"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/"},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html"},{"url":"https://security.netapp.com/advisory/ntap-20240531-0005/"}],"providerMetadata":{"shortName":"AMD","orgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateUpdated":"2023-08-08T17:06:30.065Z"},"datePublic":"2023-08-08T16:30:00.000Z","source":{"advisory":"AMD-SB-7007","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007","tags":["vendor-advisory","x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5492","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/3","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/4","tags":["x_transferred"]},{"url":"http://xenbits.xen.org/xsa/advisory-439.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/8","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/25/7","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/8","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/9","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/27/1","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/14","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/9","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/15","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/12","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/13","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/03/16","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/2","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/04/3","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240531-0005/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:05:36.921Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-17T14:23:03.408701Z","id":"CVE-2023-20588","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-17T14:23:18.239Z"}}]}}}