6.5
Moyenne
CVE-2023-20575 A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power…
Description
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 1st Gen AMD EPYC™ Processors | Versions non publiées | |
| 2nd Gen AMD EPYC™ Processors | Versions non publiées | |
| 3rd Gen AMD EPYC™ Processors | Versions non publiées | |
| 4th Gen AMD EPYC™ Processors | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 1st Gen AMD EPYC™ Processors
Les 13 CVE de 1st Gen AMD EPYC™ Processors →
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…
7.5
Élevée
CVE-2022-23829
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to…
8.2
Élevée
CVE-2023-20587
Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially…
7.1
Élevée
CVE-2023-20592
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious…
Non notée