Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-20566 State: PUBLISHED Published: 2023-11-14T18:54:00.908Z Last Updated: 2024-12-03T14:26:45.381Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003 Description: Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
CVE ID: CVE-2023-20567 State: PUBLISHED Published: 2023-11-14T18:51:25.340Z Last Updated: 2025-02-13T16:39:47.219Z Vendors: AMD Products: Radeon™ RX 5000/6000/7000 Series Graphics Cards, Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards, Radeon™ RX Vega Series Graphics Cards, Radeon™ PRO WX Vega Series Graphics Cards Description: Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bul
. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html
CVE ID: CVE-2023-20568 State: PUBLISHED Published: 2023-11-14T18:51:35.466Z Last Updated: 2025-02-13T16:39:47.747Z Vendors: AMD Products: Radeon™ RX 5000/6000/7000 Series Graphics Cards, Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards, Radeon™ RX Vega Series Graphics Cards, Radeon™ PRO WX Vega Series Graphics Cards Description: Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin
itional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html
CVE ID: CVE-2023-20569 State: PUBLISHED Published: 2023-08-08T17:02:11.318Z Last Updated: 2024-09-23T03:18:32.598Z Vendors: AMD, , AMD Products: Ryzen™ 3000 Series Desktop Processors, Ryzen™ PRO 3000 Series Desktop Processors, Ryzen™ 3000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics, Athlon™ 3000 Series Processors with Radeon™ Graphics , Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics, Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 4000 Series Desktop Processors, Ryzen™ 5000 Series Desktop Processors , Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 5000 Series Desk
000 Series Desktop Processors , Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 5000 Series Desktop Processors, Ryzen™ Threadripper™ 2000 Series Processors , Ryzen™ Threadripper™ 5000 Series Processors, Ryzen™ Threadripper™ 3000 Series Processors, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, Ryzen™ 5000 Series Processors with Radeon™ Graphics, Ryzen™ PRO 5000 Series Processors, Ryzen™ 6000 Series Processors with Radeon™ Graphics, Ryzen™ PRO 6000 Series Processors, Ryzen™ 7040 Series Processors with Radeon™ Graphics, Ryzen™ 7000 Series Processors, Ryzen™ 7000 Series Processors with Radeon™ Graphics, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Proces
Processors, Ryzen™ 7000 Series Processors with Radeon™ Graphics, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors Description: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005 - http://xenbits.xen.org/xsa/advisory-434.html - http://www.openwall.com/lists/oss-security/2023/08/08/4 - https://comsec.et
tp://xenbits.xen.org/xsa/advisory-434.html - http://www.openwall.com/lists/oss-security/2023/08/08/4 - https://comsec.ethz.ch/research/microarch/inception/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html - https://www.debian.org/security/2023/dsa-5475 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/ - https://lists.fedoraproject.org/
st/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/ - https://security.netapp.com/advisory/ntap-20240605-0006/
CVE ID: CVE-2023-20570 State: PUBLISHED Published: 2024-02-13T17:14:09.431Z Last Updated: 2025-03-22T14:12:52.749Z Vendors: AMD Products: Alveo™ Card (UltraScale™and UltraScale+™ based), Kintex™ UltraScale™ FPGA, Virtex™ UltraScale™ FPGA, Kintex™UltraScale+™ FPGA, Virtex™ UltraScale+™FPGA, Artix™ UltraScale+™ FPGA Description: Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentially load arbitrary bitstreams. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002.html
CVE ID: CVE-2023-20571 State: PUBLISHED Published: 2023-11-14T18:55:02.307Z Last Updated: 2024-08-02T09:05:45.850Z Vendors: AMD Products: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, Ryzen™ 7000 Series Desktop Processors “Raphael” XD3, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8 Des
ith Radeon™ Graphics “Barcelo-R”, Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8 Description: A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
CVE ID: CVE-2023-20573 State: PUBLISHED Published: 2024-01-11T13:53:52.581Z Last Updated: 2025-06-20T16:12:15.413Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors Description: A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3006
CVE ID: CVE-2023-20575 State: PUBLISHED Published: 2023-07-11T18:29:02.607Z Last Updated: 2024-11-27T16:01:14.610Z Vendors: AMD Products: 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors Description: A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004
CVE ID: CVE-2023-20578 State: PUBLISHED Published: 2024-08-13T16:52:58.457Z Last Updated: 2025-03-18T20:03:43.905Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD EPYC™ 7001 Processors, AMD EPYC™ 7002 Processors, AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003, AMD Ryzen™ Embedded 7
MD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003, AMD Ryzen™ Embedded 7000, AMD RyzenTM Embedded V3000 Description: A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE ID: CVE-2023-20579 State: PUBLISHED Published: 2024-02-13T19:32:11.904Z Last Updated: 2025-03-14T17:21:09.724Z Vendors: AMD Products: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics , AMD Ryzen™ 7000 Series Desktop Processor , AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics , AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics , AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics , AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics , AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics , AMD Ryzen™ 7045 Series Mobile Processors , AMD Ryzen™ 7020 Series Processors w
Series Processors with Radeon™ Graphics , AMD Ryzen™ 7045 Series Mobile Processors , AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics , AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000, AMD Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics , AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics Description: Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009
CVE ID: CVE-2023-20581 State: PUBLISHED Published: 2025-02-11T21:26:11.128Z Last Updated: 2025-02-12T15:34:49.273Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: AMD Products: AMD EPYC™ 9004 Processors, AMD EPYC™ Embedded 9004 Problem Types: CWE-1284 Description: Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
CVE ID: CVE-2023-20582 State: PUBLISHED Published: 2025-02-11T21:35:15.949Z Last Updated: 2025-02-12T15:56:22.786Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: AMD Products: AMD EPYC™ 9004 Processors, AMD EPYC™ Embedded 9004 Problem Types: CWE-1284 Description: Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resou
References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
CVE ID: CVE-2023-20583 State: PUBLISHED Published: 2023-08-01T18:00:43.783Z Last Updated: 2024-10-17T20:12:58.969Z Vendors: AMD Products: Processors Description: A potential power side-channel vulnerability in AMD processors may allow an authenticated attacker to monitor the CPU power consumption as the data in a cache line changes over time potentially resulting in a leak of sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7006
CVE ID: CVE-2023-20584 State: PUBLISHED Published: 2024-08-13T16:53:18.373Z Last Updated: 2024-11-05T21:40:37.392Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: AMD Products: AMD EPYC™ 7003 Processors, AMD EPYC™ 9004 Processors Description: IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE ID: CVE-2023-20586 State: PUBLISHED Published: 2023-08-08T17:05:16.338Z Last Updated: 2024-10-11T16:52:31.173Z Vendors: AMD Products: Radeon™ Software Crimson ReLive Edition Description: A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigations Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6007
CVE ID: CVE-2023-20587 State: PUBLISHED Published: 2024-02-13T19:31:22.706Z Last Updated: 2025-05-07T21:10:03.008Z Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, AMD EPYC(TM) Embedded 3000 , AMD EPYC(TM) Embedded 7002 , AMD EPYC(TM) Embedded 7003, AMD EPYC(TM) Embedded 9003 Description: Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009
CVE ID: CVE-2023-20588 State: PUBLISHED Published: 2023-08-08T17:06:30.065Z Last Updated: 2024-10-17T14:23:18.239Z Vendors: AMD Products: EPYC™ 7001 Processors, Athlon™ 3000 Series Processors with Radeon™ Graphics , Ryzen™ 3000 Series Processors with Radeon™ Graphics, Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics , Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics Description: A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007 - http
er: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007 - https://www.debian.org/security/2023/dsa-5480 - https://www.debian.org/security/2023/dsa-5492 - http://www.openwall.com/lists/oss-security/2023/09/25/3 - http://www.openwall.com/lists/oss-security/2023/09/25/4 - http://xenbits.xen.org/xsa/advisory-439.html - http://www.openwall.com/lists/oss-security/2023/09/25/5 - http://www.openwall.com/lists/oss-security/2023/09/25/8 - http://www.openwall.com/lists/oss-security/2023/09/25/7 - http://www.openwall.com/lists/oss-security/2023/09/26/5 - http://www.openwall.com/lists/oss-security/2023/09/26/8 - http://www.openwall.com/lists/oss-s
ss-security/2023/09/26/5 - http://www.openwall.com/lists/oss-security/2023/09/26/8 - http://www.openwall.com/lists/oss-security/2023/09/26/9 - http://www.openwall.com/lists/oss-security/2023/09/27/1 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/ - http://www.openwall.com/lists/oss-security/2023/10/03/14 - http://www.openwall.com/lists/oss-security/2023/10/03/9 - http://www.openwall.com/lists/oss-security/2023/10/03/15 - http://www.openwall.com/lists/oss-security/2023/10/03/12 - ht
http://www.openwall.com/lists/oss-security/2023/10/03/15 - http://www.openwall.com/lists/oss-security/2023/10/03/12 - http://www.openwall.com/lists/oss-security/2023/10/03/13 - http://www.openwall.com/lists/oss-security/2023/10/03/16 - http://www.openwall.com/lists/oss-security/2023/10/04/1 - http://www.openwall.com/lists/oss-security/2023/10/04/2 - http://www.openwall.com/lists/oss-security/2023/10/04/4 - http://www.openwall.com/lists/oss-security/2023/10/04/3 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advi
MHRFZUQL445MZM3/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - https://security.netapp.com/advisory/ntap-20240531-0005/
CVE ID: CVE-2023-20589 State: PUBLISHED Published: 2023-08-08T17:04:17.854Z Last Updated: 2024-11-13T15:59:15.464Z Vendors: AMD, Products: Ryzen™ 3000 Series Desktop Processors, Ryzen™ PRO 3000 Series Desktop Processors, Ryzen™ 3000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics, Athlon™ 3000 Series Processors with Radeon™ Graphics , Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics, Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 4000 Series Desktop Processors, Ryzen™ 5000 Series Desktop Processors , Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 5000 Series Desktop Pr
ries Desktop Processors , Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, Ryzen™ PRO 5000 Series Desktop Processors, Ryzen™ Threadripper™ 2000 Series Processors , Ryzen™ Threadripper™ 5000 Series Processors, Ryzen™ Threadripper™ 3000 Series Processors, Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, Ryzen™ 5000 Series Processors with Radeon™ Graphics, Ryzen™ PRO 5000 Series Processors, Ryzen™ 6000 Series Processors with Radeon™ Graphics, Ryzen™ PRO 6000 Series Processors, Ryzen™ 7020 Series Processors with Radeon™ Graphics, Ryzen™ 7030 Series Processors with Radeon™ Graphics, Ryzen™ PRO 7030 Series Processors, Ryzen™ 7035 Series Processors with Radeon™ Graphics Desc
ssors with Radeon™ Graphics, Ryzen™ PRO 7030 Series Processors, Ryzen™ 7035 Series Processors with Radeon™ Graphics Description: An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4005
CVE ID: CVE-2023-20591 State: PUBLISHED Published: 2024-08-13T16:53:23.681Z Last Updated: 2025-03-13T16:41:15.645Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: AMD Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9003 Series Processors Description: Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
s of confidentiality, integrity, and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE ID: CVE-2023-20592 State: PUBLISHED Published: 2023-11-14T18:54:13.255Z Last Updated: 2024-10-11T18:07:49.421Z Vendors: AMD, AMD Products: 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors Description: Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3005
CVE ID: CVE-2023-20593 State: PUBLISHED Published: 2023-07-24T19:38:43.385Z Last Updated: 2025-02-13T16:39:49.154Z Vendors: AMD Products: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4, 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT, Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Lucienne”, Ryzen™ 4000 Series Mobile processors with Radeon™ Graphics “Renoir”, Ryzen™ 7020 Series processors “Mendocino” FT6, 2nd Gen AMD EPYC™ Processors Description: An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may a
d Gen AMD EPYC™ Processors Description: An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008 - http://xenbits.xen.org/xsa/advisory-433.html - http://www.openwall.com/lists/oss-security/2023/07/24/3 - http://seclists.org/fulldisclosure/2023/Jul/43 - http://www.openwall.com/lists/oss-security/2023/07/25/5 - http://www.openwall.com/lists/oss-security/2023/07/25/6 - http://www.openwall.com/lists/oss-security/2023/07/25/1 - http://www.openwall.com/lis
/lists/oss-security/2023/07/25/6 - http://www.openwall.com/lists/oss-security/2023/07/25/1 - http://www.openwall.com/lists/oss-security/2023/07/25/13 - http://www.openwall.com/lists/oss-security/2023/07/25/17 - http://www.openwall.com/lists/oss-security/2023/07/25/12 - http://www.openwall.com/lists/oss-security/2023/07/25/16 - http://www.openwall.com/lists/oss-security/2023/07/25/14 - http://www.openwall.com/lists/oss-security/2023/07/25/15 - http://www.openwall.com/lists/oss-security/2023/07/26/1 - https://cmpxchg8b.com/zenbleed.html - https://www.debian.org/security/2023/dsa-5459 - https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - https://www.debian.org/security/2023/dsa