CVE-2023-20593

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

• CWE-209

• https://seclists.org/fulldisclosure/2023/Jul/43Not Applicable
• https://www.openwall.com/lists/oss-security/2023/07/24/3Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/1Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/12Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/13Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/14Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/15Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/16Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/17Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/5Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/6Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/26/1Mailing List, Mitigation, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/07/31/2Mailing List, Mitigation, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/08/08/6
• https://www.openwall.com/lists/oss-security/2023/08/08/7
• https://www.openwall.com/lists/oss-security/2023/08/08/8
• https://www.openwall.com/lists/oss-security/2023/08/16/4
• https://www.openwall.com/lists/oss-security/2023/08/16/5
• https://www.openwall.com/lists/oss-security/2023/09/22/11
• https://www.openwall.com/lists/oss-security/2023/09/22/9
• https://www.openwall.com/lists/oss-security/2023/09/25/4
• https://www.openwall.com/lists/oss-security/2023/09/25/7
• https://xenbits.xen.org/xsa/advisory-433.htmlMitigation, Patch, Vendor Advisory
• https://cmpxchg8b.com/zenbleed.htmlExploit
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2023/07/msg00033.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/
• https://security.netapp.com/advisory/ntap-20240531-0004/
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008Vendor Advisory
• https://www.debian.org/security/2023/dsa-5459Third Party Advisory
• https://www.debian.org/security/2023/dsa-5461Third Party Advisory
• https://www.debian.org/security/2023/dsa-5462Third Party Advisory
• https://seclists.org/fulldisclosure/2023/Jul/43Not Applicable
• https://www.openwall.com/lists/oss-security/2023/07/24/3Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/1Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/12Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/13Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/14Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/15Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/16Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/17Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/5Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/25/6Mailing List
• https://www.openwall.com/lists/oss-security/2023/07/26/1Mailing List, Mitigation, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/07/31/2Mailing List, Mitigation, Patch, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2023/08/08/6
• https://www.openwall.com/lists/oss-security/2023/08/08/7
• https://www.openwall.com/lists/oss-security/2023/08/08/8
• https://www.openwall.com/lists/oss-security/2023/08/16/4
• https://www.openwall.com/lists/oss-security/2023/08/16/5
• https://www.openwall.com/lists/oss-security/2023/09/22/11
• https://www.openwall.com/lists/oss-security/2023/09/22/9
• https://www.openwall.com/lists/oss-security/2023/09/25/4
• https://www.openwall.com/lists/oss-security/2023/09/25/7
• https://xenbits.xen.org/xsa/advisory-433.htmlMitigation, Patch, Vendor Advisory
• https://cmpxchg8b.com/zenbleed.htmlExploit
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlMailing List
• https://lists.debian.org/debian-lts-announce/2023/07/msg00033.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/
• https://security.netapp.com/advisory/ntap-20240531-0004/
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008Vendor Advisory
• https://www.debian.org/security/2023/dsa-5459Third Party Advisory
• https://www.debian.org/security/2023/dsa-5461Third Party Advisory
• https://www.debian.org/security/2023/dsa-5462Third Party Advisory

Published

Jul 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20587Improper Access Control in System Management Mode (SMM) may …7.1
• CVE-2023-20588 A division-by-zero error on some AMD processors can potenti…5.5
• CVE-2023-20589 An attacker with specialized hardware and physical access t…6.8
• CVE-2023-2059A vulnerability was found in DedeCMS 5.7.87. It has been rat…5.3
• CVE-2023-20591Improper re-initialization of IOMMU during the DRTM event ma…10
• CVE-2023-20592Improper or unexpected behavior of the INVD instruction in s…6.5
• CVE-2023-20594Improper initialization of variables in the DXE driver may a…4.4
• CVE-2023-20596Improper input validation in the SMM Supervisor may allow an…9.8
• CVE-2023-20597Improper initialization of variables in the DXE driver may a…5.5
• CVE-2023-20598 An improper privilege management in the AMD Radeon™ Graph…7.8
• CVE-2023-20599Improper register access control in ASP may allow a privileg…7.9
• CVE-2023-2060Weak Password Requirements vulnerability in FTP function on …7.5