wid-sec-w-2023-1873
Vulnerability from csaf_certbund
Published
2023-07-24 22:00
Modified
2024-04-09 22:00
Summary
AMD Prozessor: Schwachstelle ermöglicht Offenlegung von Informationen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Prozessoren sind die zentralen Rechenwerke eines Computers.
Angriff
Ein lokaler Angreifer kann eine Schwachstelle im AMD Prozessor ausnutzen, um Informationen offenzulegen.
Betroffene Betriebssysteme
- BIOS/Firmware
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Prozessoren sind die zentralen Rechenwerke eines Computers.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle im AMD Prozessor ausnutzen, um Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- BIOS/Firmware",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-1873 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1873.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-1873 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1873"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0402 vom 2024-01-25",
"url": "https://access.redhat.com/errata/RHSA-2024:0402"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0403 vom 2024-01-25",
"url": "https://access.redhat.com/errata/RHSA-2024:0403"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7782 vom 2023-12-13",
"url": "https://access.redhat.com/errata/RHSA-2023:7782"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0561 vom 2024-01-30",
"url": "https://access.redhat.com/errata/RHSA-2024:0561"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2023:7513 vom 2024-01-12",
"url": "https://lists.centos.org/pipermail/centos-announce/2024-January/099179.html"
},
{
"category": "external",
"summary": "AMD Security Bulletin - AMD-SB-7008 vom 2023-07-24",
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7008.html"
},
{
"category": "external",
"summary": "Citrix Hypervisor Security Update for AMD Zen2 Processors vulnerability - CTX566835",
"url": "https://support.citrix.com/article/CTX566835/citrix-hypervisor-security-update-for-cve202320593"
},
{
"category": "external",
"summary": "Lenovo Security Update for AMD Zen2 Vulnerability - LEN-130057",
"url": "https://support.lenovo.com/us/en/product_security/LEN-130057"
},
{
"category": "external",
"summary": "PoC",
"url": "https://lock.cmpxchg8b.com/zenbleed.html"
},
{
"category": "external",
"summary": "AMD Security Bulletin - AMD-SB-7008 vom 2023-07-24",
"url": "https://github.com/google/security-research/security/advisories/GHSA-v6wh-rxpg-cmm8"
},
{
"category": "external",
"summary": "Xen Security Advisory XSA-433",
"url": "https://xenbits.xen.org/xsa/advisory-433.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6244-1 vom 2023-07-25",
"url": "https://ubuntu.com/security/notices/USN-6244-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12654 vom 2023-07-26",
"url": "https://linux.oracle.com/errata/ELSA-2023-12654.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12655 vom 2023-07-26",
"url": "https://linux.oracle.com/errata/ELSA-2023-12655.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12656 vom 2023-07-26",
"url": "https://linux.oracle.com/errata/ELSA-2023-12656.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12657 vom 2023-07-26",
"url": "https://linux.oracle.com/errata/ELSA-2023-12657.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5459 vom 2023-07-27",
"url": "https://www.debian.org/security/2023/dsa-5459"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:2986-1 vom 2023-07-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015670.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3001-1 vom 2023-07-27",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015679.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3508 vom 2023-07-27",
"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3006-1 vom 2023-07-27",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015680.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5462 vom 2023-07-30",
"url": "https://lists.debian.org/debian-security-announce/2023/msg00154.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3019-1 vom 2023-07-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015692.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5461 vom 2023-07-30",
"url": "https://lists.debian.org/debian-security-announce/2023/msg00153.html"
},
{
"category": "external",
"summary": "IGEL Security Notice ISN-2023-15 vom 2023-07-28",
"url": "https://kb.igel.com/securitysafety/en/isn-2023-15-zenbleed-vulnerability-90234080.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3022-1 vom 2023-07-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015689.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3020-1 vom 2023-07-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015691.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12690 vom 2023-07-31",
"url": "https://linux.oracle.com/errata/ELSA-2023-12690.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12691 vom 2023-07-31",
"url": "https://linux.oracle.com/errata/ELSA-2023-12691.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3511 vom 2023-07-31",
"url": "https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12689 vom 2023-07-31",
"url": "https://linux.oracle.com/errata/ELSA-2023-12689.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12692 vom 2023-07-31",
"url": "https://linux.oracle.com/errata/ELSA-2023-12692.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2023-260668B8B9 vom 2023-07-31",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-260668b8b9"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2023-38F0879EF3 vom 2023-07-31",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-38f0879ef3"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-3512 vom 2023-08-02",
"url": "https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3172-1 vom 2023-08-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015771.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3171-1 vom 2023-08-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015772.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3182-1 vom 2023-08-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015778.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3180-1 vom 2023-08-03",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015780.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3206-1 vom 2023-08-07",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015795.html"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2023-209 vom 2023-08-08",
"url": "https://www.dell.com/support/kbdoc/de-de/000216119/dsa-2023-209-security-update-for-dell-amd-based-poweredge-server-vulnerabilities"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2023-2190 vom 2023-08-09",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2190.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.15-2023-025 vom 2023-08-10",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.15-2023-025.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.4-2023-050 vom 2023-08-10",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2023-050.html"
},
{
"category": "external",
"summary": "HPE Security Bulletin",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04504en_us"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2023-04473FC41E vom 2023-08-12",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-04473fc41e"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3302-1 vom 2023-08-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015894.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3318-1 vom 2023-08-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015905.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3324-1 vom 2023-08-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015910.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3333-1 vom 2023-08-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015911.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3349-1 vom 2023-08-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015945.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4696 vom 2023-08-22",
"url": "https://access.redhat.com/errata/RHSA-2023:4696"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4699 vom 2023-08-22",
"url": "https://access.redhat.com/errata/RHSA-2023:4699"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3395-1 vom 2023-08-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016013.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3391-1 vom 2023-08-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015999.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3390-1 vom 2023-08-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015998.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3392-1 vom 2023-08-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/015997.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3421-1 vom 2023-08-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016021.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3446-1 vom 2023-08-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016031.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3447-1 vom 2023-08-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016030.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6317-1 vom 2023-08-30",
"url": "https://ubuntu.com/security/notices/USN-6317-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4789 vom 2023-08-29",
"url": "https://access.redhat.com/errata/RHSA-2023:4789"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4819 vom 2023-08-29",
"url": "https://access.redhat.com/errata/RHSA-2023:4819"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6315-1 vom 2023-08-29",
"url": "https://ubuntu.com/security/notices/USN-6315-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:4821 vom 2023-08-29",
"url": "https://access.redhat.com/errata/RHSA-2023:4821"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6316-1 vom 2023-08-30",
"url": "https://ubuntu.com/security/notices/USN-6316-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6318-1 vom 2023-08-30",
"url": "https://ubuntu.com/security/notices/USN-6318-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6321-1 vom 2023-08-30",
"url": "https://ubuntu.com/security/notices/USN-6321-1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3495-1 vom 2023-08-30",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016050.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3494-1 vom 2023-08-30",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016051.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3496-1 vom 2023-08-30",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-August/016049.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6330-1 vom 2023-09-01",
"url": "https://ubuntu.com/security/notices/USN-6330-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6325-1 vom 2023-08-31",
"url": "https://ubuntu.com/security/notices/USN-6325-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6324-1 vom 2023-08-31",
"url": "https://ubuntu.com/security/notices/USN-6324-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6332-1 vom 2023-09-01",
"url": "https://ubuntu.com/security/notices/USN-6332-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6331-1 vom 2023-09-01",
"url": "https://ubuntu.com/security/notices/USN-6331-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6329-1 vom 2023-09-01",
"url": "https://ubuntu.com/security/notices/USN-6329-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6328-1 vom 2023-09-01",
"url": "https://ubuntu.com/security/notices/USN-6328-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-4819 vom 2023-08-31",
"url": "https://linux.oracle.com/errata/ELSA-2023-4819.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6342-1 vom 2023-09-06",
"url": "https://ubuntu.com/security/notices/USN-6342-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6346-1 vom 2023-09-06",
"url": "https://ubuntu.com/security/notices/USN-6346-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6348-1 vom 2023-09-06",
"url": "https://ubuntu.com/security/notices/USN-6348-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6342-2 vom 2023-09-09",
"url": "https://ubuntu.com/security/notices/USN-6342-2"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6357-1 vom 2023-09-11",
"url": "https://ubuntu.com/security/notices/USN-6357-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5068 vom 2023-09-12",
"url": "https://access.redhat.com/errata/RHSA-2023:5068"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-7749 vom 2023-12-22",
"url": "https://linux.oracle.com/errata/ELSA-2023-7749.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6385-1 vom 2023-09-19",
"url": "https://ubuntu.com/security/notices/USN-6385-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5244 vom 2023-09-19",
"url": "https://access.redhat.com/errata/RHSA-2023:5244"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5245 vom 2023-09-19",
"url": "https://access.redhat.com/errata/RHSA-2023:5245"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5255 vom 2023-09-19",
"url": "https://access.redhat.com/errata/RHSA-2023:5255"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-5244 vom 2023-09-21",
"url": "https://linux.oracle.com/errata/ELSA-2023-5244.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12836 vom 2023-09-25",
"url": "https://linux.oracle.com/errata/ELSA-2023-12836.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6397-1 vom 2023-09-26",
"url": "https://www.cybersecurity-help.cz/vdb/SB2023092652"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3902-1 vom 2023-09-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016466.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3895-1 vom 2023-09-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016463.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3903-1 vom 2023-09-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016465.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-12839 vom 2023-09-29",
"url": "http://linux.oracle.com/errata/ELSA-2023-12839.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2023:3894-1 vom 2023-09-29",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016464.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5419 vom 2023-10-03",
"url": "https://access.redhat.com/errata/RHSA-2023:5419"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5591 vom 2023-10-11",
"url": "https://access.redhat.com/errata/RHSA-2023:5591"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:5607 vom 2023-10-11",
"url": "https://access.redhat.com/errata/RHSA-2023:5607"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-5068 vom 2023-10-25",
"url": "https://linux.oracle.com/errata/ELSA-2023-5068.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7070736 vom 2023-11-10",
"url": "https://www.ibm.com/support/pages/node/7070736"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7244 vom 2023-11-16",
"url": "https://access.redhat.com/errata/RHSA-2023:7244"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7401 vom 2023-11-21",
"url": "https://access.redhat.com/errata/RHSA-2023:7401"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7389 vom 2023-11-21",
"url": "https://access.redhat.com/errata/RHSA-2023:7389"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7382 vom 2023-11-21",
"url": "https://access.redhat.com/errata/RHSA-2023:7382"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7513 vom 2023-11-27",
"url": "https://access.redhat.com/errata/RHSA-2023:7513"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7551 vom 2023-11-28",
"url": "https://access.redhat.com/errata/RHSA-2023:7551"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7557 vom 2023-11-29",
"url": "https://access.redhat.com/errata/RHSA-2023:7557"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6532-1 vom 2023-12-06",
"url": "https://ubuntu.com/security/notices/USN-6532-1"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2023:7665 vom 2023-12-06",
"url": "https://access.redhat.com/errata/RHSA-2023:7665"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0885-1 vom 2024-03-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018178.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2024:0884-1 vom 2024-03-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2024-March/018179.html"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-027 vom 2024-04-09",
"url": "https://www.dell.com/support/kbdoc/de-de/000216151/dsa-2023-272"
}
],
"source_lang": "en-US",
"title": "AMD Prozessor: Schwachstelle erm\u00f6glicht Offenlegung von Informationen",
"tracking": {
"current_release_date": "2024-04-09T22:00:00.000+00:00",
"generator": {
"date": "2024-04-10T08:08:13.349+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-1873",
"initial_release_date": "2023-07-24T22:00:00.000+00:00",
"revision_history": [
{
"date": "2023-07-24T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-07-25T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-07-26T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Oracle Linux, Debian und SUSE aufgenommen"
},
{
"date": "2023-07-27T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE und Debian aufgenommen"
},
{
"date": "2023-07-30T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Debian, SUSE und IGEL aufgenommen"
},
{
"date": "2023-07-31T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Oracle Linux, Debian und Fedora aufgenommen"
},
{
"date": "2023-08-02T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2023-08-03T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-07T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-08T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2023-08-09T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2023-08-10T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2023-08-13T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2023-08-15T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-16T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-17T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-22T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-08-23T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-24T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-28T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2023-08-29T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Ubuntu und Red Hat aufgenommen"
},
{
"date": "2023-08-30T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Ubuntu und SUSE aufgenommen"
},
{
"date": "2023-08-31T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Ubuntu und Oracle Linux aufgenommen"
},
{
"date": "2023-09-05T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-09-06T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-09-10T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-09-11T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-09-12T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-09-19T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Ubuntu und Red Hat aufgenommen"
},
{
"date": "2023-09-20T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-09-25T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-09-26T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-10-01T22:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von SUSE und Oracle Linux aufgenommen"
},
{
"date": "2023-10-03T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-10-10T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-10-25T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2023-11-12T23:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-11-15T23:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-11-21T23:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-11-27T23:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-11-28T23:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-12-05T23:00:00.000+00:00",
"number": "42",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2023-12-06T23:00:00.000+00:00",
"number": "43",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-12-13T23:00:00.000+00:00",
"number": "44",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2023-12-26T23:00:00.000+00:00",
"number": "45",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-14T23:00:00.000+00:00",
"number": "46",
"summary": "Neue Updates von CentOS aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "47",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-01-30T23:00:00.000+00:00",
"number": "48",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-03-14T23:00:00.000+00:00",
"number": "49",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2024-04-09T22:00:00.000+00:00",
"number": "50",
"summary": "Neue Updates von Dell aufgenommen"
}
],
"status": "final",
"version": "50"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "Ryzen 3000",
"product": {
"name": "AMD Prozessor Ryzen 3000",
"product_id": "T028864",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_3000"
}
}
},
{
"category": "product_version",
"name": "Ryzen PRO 3000",
"product": {
"name": "AMD Prozessor Ryzen PRO 3000",
"product_id": "T028865",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_pro_3000"
}
}
},
{
"category": "product_version",
"name": "Ryzen Threadripper 3000",
"product": {
"name": "AMD Prozessor Ryzen Threadripper 3000",
"product_id": "T028867",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_threadripper_3000"
}
}
},
{
"category": "product_version",
"name": "Ryzen 4000",
"product": {
"name": "AMD Prozessor Ryzen 4000",
"product_id": "T028869",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_4000"
}
}
},
{
"category": "product_version",
"name": "Ryzen PRO 4000",
"product": {
"name": "AMD Prozessor Ryzen PRO 4000",
"product_id": "T028870",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_pro_4000"
}
}
},
{
"category": "product_version",
"name": "Ryzen 5000",
"product": {
"name": "AMD Prozessor Ryzen 5000",
"product_id": "T028872",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_5000"
}
}
},
{
"category": "product_version",
"name": "Ryzen 7020",
"product": {
"name": "AMD Prozessor Ryzen 7020",
"product_id": "T028873",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:ryzen_7020"
}
}
},
{
"category": "product_version",
"name": "EPYC 7002",
"product": {
"name": "AMD Prozessor EPYC 7002",
"product_id": "T028874",
"product_identification_helper": {
"cpe": "cpe:/h:amd:amd_processor:epyc_7002"
}
}
}
],
"category": "product_name",
"name": "Prozessor"
}
],
"category": "vendor",
"name": "AMD"
},
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "Vostro 15 3535",
"product": {
"name": "Dell Computer Vostro 15 3535",
"product_id": "T033986",
"product_identification_helper": {
"cpe": "cpe:/o:dell:dell_computer:vostro_15_3535"
}
}
}
],
"category": "product_name",
"name": "Computer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 2.12.3",
"product": {
"name": "Dell PowerEdge \u003c 2.12.3",
"product_id": "T029125",
"product_identification_helper": {
"cpe": "cpe:/h:dell:poweredge:2.12.3"
}
}
}
],
"category": "product_name",
"name": "PowerEdge"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE ProLiant",
"product": {
"name": "HPE ProLiant",
"product_id": "T027712",
"product_identification_helper": {
"cpe": "cpe:/h:hp:proliant:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 7.5.0 UP7 IF02",
"product": {
"name": "IBM QRadar SIEM \u003c 7.5.0 UP7 IF02",
"product_id": "T031043",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up7_if02"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "IGEL OS",
"product": {
"name": "IGEL OS",
"product_id": "T017865",
"product_identification_helper": {
"cpe": "cpe:/o:igel:os:-"
}
}
}
],
"category": "vendor",
"name": "IGEL"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
},
{
"category": "product_name",
"name": "Open Source Xen",
"product": {
"name": "Open Source Xen",
"product_id": "T000611",
"product_identification_helper": {
"cpe": "cpe:/o:xen:xen:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-20593",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle im AMD Prozessor. Dieser Fehler besteht in mehreren Zen2-Produkten aufgrund einer Use-after-Free, die es erlaubt, die Register anderer Prozesse zu lesen. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen."
}
],
"product_status": {
"known_affected": [
"T028870",
"T033986",
"67646",
"T004914",
"T031043",
"74185",
"2951",
"T002207",
"T000611",
"T017865",
"T000126",
"T028869",
"T027712",
"T028867",
"398363",
"T028864",
"T028865",
"1727",
"T028873",
"T028874",
"T029125",
"T028872"
]
},
"release_date": "2023-07-24T22:00:00Z",
"title": "CVE-2023-20593"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.