CVE-2023-20593

MEDIUMCVSS 5.5/10EPSS 5.79%

Last modified

CVE-2023-20593 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.. EPSS estimates a 5.79% chance of exploitation in the next 30 days.

Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Metrics

CVSS 3.1
5.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
5.79%

92.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
XenXen4.14.0
XenXen4.15.0
XenXen4.16.0
XenXen4.17.0
DebianDebian Linux10.0
DebianDebian Linux11.0
DebianDebian Linux12.0
AmdRyzen 3 3100 FirmwareAll versions
AmdRyzen 3 3300x FirmwareAll versions
AmdRyzen 5 3500 FirmwareAll versions
AmdRyzen 5 3500x FirmwareAll versions
AmdRyzen 5 3600 FirmwareAll versions
AmdRyzen 5 3600x FirmwareAll versions
AmdRyzen 5 3600xt FirmwareAll versions
AmdRyzen 7 3700x FirmwareAll versions
AmdRyzen 7 3800x FirmwareAll versions
AmdRyzen 7 3800xt FirmwareAll versions
AmdRyzen 9 3900 FirmwareAll versions
AmdRyzen 9 3900x FirmwareAll versions
AmdRyzen 9 3900xt FirmwareAll versions
AmdRyzen 9 3950x FirmwareAll versions
AmdRyzen 9 Pro 3900 FirmwareAll versions
AmdRyzen Threadripper Pro 3995wx FirmwareAll versions
AmdRyzen Threadripper Pro 3975wx FirmwareAll versions
AmdRyzen Threadripper Pro 3955wx FirmwareAll versions
AmdRyzen Threadripper Pro 3945wx FirmwareAll versions
AmdRyzen Threadripper 3990x FirmwareAll versions
AmdRyzen Threadripper 3970x FirmwareAll versions
AmdRyzen Threadripper 3960x FirmwareAll versions
AmdRyzen 7 4700g FirmwareAll versions
AmdRyzen 7 4700ge FirmwareAll versions
AmdRyzen 5 4600g FirmwareAll versions
AmdRyzen 5 4600ge FirmwareAll versions
AmdRyzen 3 4300g FirmwareAll versions
AmdRyzen 3 4300ge FirmwareAll versions
AmdRyzen 3 Pro 4450u FirmwareAll versions
AmdRyzen 3 Pro 4350ge FirmwareAll versions
AmdRyzen 3 Pro 4350g FirmwareAll versions
AmdRyzen 3 Pro 4200g FirmwareAll versions
AmdRyzen 5 Pro 4650ge FirmwareAll versions
AmdRyzen 5 Pro 4650g FirmwareAll versions
AmdRyzen 5 Pro 4400g FirmwareAll versions
AmdRyzen 7 Pro 4750u FirmwareAll versions
AmdRyzen 7 Pro 4750ge FirmwareAll versions
AmdRyzen 7 Pro 4750g FirmwareAll versions
AmdRyzen 7 5700u FirmwareAll versions
AmdRyzen 5 5500u FirmwareAll versions
AmdRyzen 3 5300u FirmwareAll versions
AmdRyzen 5 7520u FirmwareAll versions
AmdRyzen 3 7320u FirmwareAll versions

Showing 50 of 76 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-20593?
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
How severe is CVE-2023-20593?
CVE-2023-20593 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 5.79% probability of exploitation in the next 30 days.
How do I fix CVE-2023-20593?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-20593?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST