Skip to content
fr Sign in
6.5 Medium

CVE-2023-20575 A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power…

Description

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

Affected products and versions

Product Affected versions Fixed in
1st Gen AMD EPYC™ Processors Versions not published
2nd Gen AMD EPYC™ Processors Versions not published
3rd Gen AMD EPYC™ Processors Versions not published
4th Gen AMD EPYC™ Processors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of 1st Gen AMD EPYC™ Processors

The 13 CVEs of 1st Gen AMD EPYC™ Processors →
CVE-2023-31315 Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM… 7.5 High CVE-2022-23829 A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to… 8.2 High CVE-2023-20587 Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially… 7.1 High CVE-2023-20592 Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious… Not rated
Track this CVE