CVE Feed

    Dashboard / CVE / CVE-2023-20593

    CVE-2023-20593

    An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

    Published:Jul 24, 2023
    Last Modified:Feb 13, 2025
    EPS:Jul 24, 2023
    EPSS Score:0.0632
    CVSS Score:5.5

    Affected Products

    Vendor
    Amd
    Product
    Athlon Gold 7220u
    Vendor
    Amd
    Product
    Athlon Gold 7220u Firmware
    Vendor
    Amd
    Product
    Epyc 7232p
    Vendor
    Amd
    Product
    Epyc 7232p Firmware
    Vendor
    Amd
    Product
    Epyc 7252
    Vendor
    Amd
    Product
    Epyc 7252 Firmware
    Vendor
    Amd
    Product
    Epyc 7262
    Vendor
    Amd
    Product
    Epyc 7262 Firmware
    Vendor
    Amd
    Product
    Epyc 7272
    Vendor
    Amd
    Product
    Epyc 7272 Firmware
    Vendor
    Amd
    Product
    Epyc 7282
    Vendor
    Amd
    Product
    Epyc 7282 Firmware
    Vendor
    Amd
    Product
    Epyc 7302
    Vendor
    Amd
    Product
    Epyc 7302 Firmware
    Vendor
    Amd
    Product
    Epyc 7302p
    Vendor
    Amd
    Product
    Epyc 7302p Firmware
    Vendor
    Amd
    Product
    Epyc 7352
    Vendor
    Amd
    Product
    Epyc 7352 Firmware
    Vendor
    Amd
    Product
    Epyc 7402
    Vendor
    Amd
    Product
    Epyc 7402 Firmware
    Vendor
    Amd
    Product
    Epyc 7402p
    Vendor
    Amd
    Product
    Epyc 7402p Firmware
    Vendor
    Amd
    Product
    Epyc 7452
    Vendor
    Amd
    Product
    Epyc 7452 Firmware
    Vendor
    Amd
    Product
    Epyc 7502
    Vendor
    Amd
    Product
    Epyc 7502 Firmware
    Vendor
    Amd
    Product
    Epyc 7502p
    Vendor
    Amd
    Product
    Epyc 7502p Firmware
    Vendor
    Amd
    Product
    Epyc 7532
    Vendor
    Amd
    Product
    Epyc 7532 Firmware
    Vendor
    Amd
    Product
    Epyc 7542
    Vendor
    Amd
    Product
    Epyc 7542 Firmware
    Vendor
    Amd
    Product
    Epyc 7552
    Vendor
    Amd
    Product
    Epyc 7552 Firmware
    Vendor
    Amd
    Product
    Epyc 7642
    Vendor
    Amd
    Product
    Epyc 7642 Firmware
    Vendor
    Amd
    Product
    Epyc 7662
    Vendor
    Amd
    Product
    Epyc 7662 Firmware
    Vendor
    Amd
    Product
    Epyc 7702
    Vendor
    Amd
    Product
    Epyc 7702 Firmware
    Vendor
    Amd
    Product
    Epyc 7702p
    Vendor
    Amd
    Product
    Epyc 7702p Firmware
    Vendor
    Amd
    Product
    Epyc 7742
    Vendor
    Amd
    Product
    Epyc 7742 Firmware
    Vendor
    Amd
    Product
    Epyc 7f32
    Vendor
    Amd
    Product
    Epyc 7f32 Firmware
    Vendor
    Amd
    Product
    Epyc 7f52
    Vendor
    Amd
    Product
    Epyc 7f52 Firmware
    Vendor
    Amd
    Product
    Epyc 7f72
    Vendor
    Amd
    Product
    Epyc 7f72 Firmware
    Vendor
    Amd
    Product
    Epyc 7h12
    Vendor
    Amd
    Product
    Epyc 7h12 Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3100
    Vendor
    Amd
    Product
    Ryzen 3 3100 Firmware
    Vendor
    Amd
    Product
    Ryzen 3 3300x
    Vendor
    Amd
    Product
    Ryzen 3 3300x Firmware
    Vendor
    Amd
    Product
    Ryzen 3 4300g
    Vendor
    Amd
    Product
    Ryzen 3 4300g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 4300ge
    Vendor
    Amd
    Product
    Ryzen 3 4300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300u
    Vendor
    Amd
    Product
    Ryzen 3 5300u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 7320u
    Vendor
    Amd
    Product
    Ryzen 3 7320u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4200g
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4200g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4350g
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4350g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4350ge
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4350ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4450u
    Vendor
    Amd
    Product
    Ryzen 3 Pro 4450u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500
    Vendor
    Amd
    Product
    Ryzen 5 3500 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3500x
    Vendor
    Amd
    Product
    Ryzen 5 3500x Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3600
    Vendor
    Amd
    Product
    Ryzen 5 3600 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3600x
    Vendor
    Amd
    Product
    Ryzen 5 3600x Firmware
    Vendor
    Amd
    Product
    Ryzen 5 3600xt
    Vendor
    Amd
    Product
    Ryzen 5 3600xt Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600g
    Vendor
    Amd
    Product
    Ryzen 5 4600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 4600ge
    Vendor
    Amd
    Product
    Ryzen 5 4600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500u
    Vendor
    Amd
    Product
    Ryzen 5 5500u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7520u
    Vendor
    Amd
    Product
    Ryzen 5 7520u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 4400g
    Vendor
    Amd
    Product
    Ryzen 5 Pro 4400g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 4650g
    Vendor
    Amd
    Product
    Ryzen 5 Pro 4650g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 4650ge
    Vendor
    Amd
    Product
    Ryzen 5 Pro 4650ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3700x
    Vendor
    Amd
    Product
    Ryzen 7 3700x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3800x
    Vendor
    Amd
    Product
    Ryzen 7 3800x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 3800xt
    Vendor
    Amd
    Product
    Ryzen 7 3800xt Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4700g
    Vendor
    Amd
    Product
    Ryzen 7 4700g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 4700ge
    Vendor
    Amd
    Product
    Ryzen 7 4700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700u
    Vendor
    Amd
    Product
    Ryzen 7 5700u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 4750g
    Vendor
    Amd
    Product
    Ryzen 7 Pro 4750g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 4750ge
    Vendor
    Amd
    Product
    Ryzen 7 Pro 4750ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 4750u
    Vendor
    Amd
    Product
    Ryzen 7 Pro 4750u Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3900
    Vendor
    Amd
    Product
    Ryzen 9 3900 Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3900x
    Vendor
    Amd
    Product
    Ryzen 9 3900x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3900xt
    Vendor
    Amd
    Product
    Ryzen 9 3900xt Firmware
    Vendor
    Amd
    Product
    Ryzen 9 3950x
    Vendor
    Amd
    Product
    Ryzen 9 3950x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 Pro 3900
    Vendor
    Amd
    Product
    Ryzen 9 Pro 3900 Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3960x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3960x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3970x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3970x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper 3990x
    Vendor
    Amd
    Product
    Ryzen Threadripper 3990x Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3945wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3945wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3955wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3955wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3975wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3975wx Firmware
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3995wx
    Vendor
    Amd
    Product
    Ryzen Threadripper Pro 3995wx Firmware
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Extras Rt
    Vendor
    Redhat
    Product
    Rhel Tus
    Vendor
    Redhat
    Product
    Rhev Hypervisor
    Vendor
    Xen
    Product
    Xen

    Exploits

    https://cmpxchg8b.com/zenbleed.htmlhttps://cmpxchg8b.com/zenbleed.htmlhttps://github.com/sbaresearch/stop-zenbleed-win

    References

    http://seclists.org/fulldisclosure/2023/Jul/43
    http://www.openwall.com/lists/oss-security/2023/07/24/3
    http://www.openwall.com/lists/oss-security/2023/07/25/1
    http://www.openwall.com/lists/oss-security/2023/07/25/12
    http://www.openwall.com/lists/oss-security/2023/07/25/13
    http://www.openwall.com/lists/oss-security/2023/07/25/14
    http://www.openwall.com/lists/oss-security/2023/07/25/15
    http://www.openwall.com/lists/oss-security/2023/07/25/16
    http://www.openwall.com/lists/oss-security/2023/07/25/17
    http://www.openwall.com/lists/oss-security/2023/07/25/5
    http://www.openwall.com/lists/oss-security/2023/07/25/6
    http://www.openwall.com/lists/oss-security/2023/07/26/1
    http://www.openwall.com/lists/oss-security/2023/07/31/2
    http://www.openwall.com/lists/oss-security/2023/08/08/6
    http://www.openwall.com/lists/oss-security/2023/08/08/7
    http://www.openwall.com/lists/oss-security/2023/08/08/8
    http://www.openwall.com/lists/oss-security/2023/08/16/4
    http://www.openwall.com/lists/oss-security/2023/08/16/5
    http://www.openwall.com/lists/oss-security/2023/09/22/11
    http://www.openwall.com/lists/oss-security/2023/09/22/9
    http://www.openwall.com/lists/oss-security/2023/09/25/4
    http://www.openwall.com/lists/oss-security/2023/09/25/7
    http://xenbits.xen.org/xsa/advisory-433.html
    https://cmpxchg8b.com/zenbleed.html
    https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
    https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html
    https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
    https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/
    https://security.netapp.com/advisory/ntap-20240531-0004/
    https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008
    https://www.debian.org/security/2023/dsa-5459
    https://www.debian.org/security/2023/dsa-5461
    https://www.debian.org/security/2023/dsa-5462
    http://seclists.org/fulldisclosure/2023/Jul/43
    http://www.openwall.com/lists/oss-security/2023/07/24/3
    http://www.openwall.com/lists/oss-security/2023/07/25/1
    http://www.openwall.com/lists/oss-security/2023/07/25/12
    http://www.openwall.com/lists/oss-security/2023/07/25/13
    http://www.openwall.com/lists/oss-security/2023/07/25/14
    http://www.openwall.com/lists/oss-security/2023/07/25/15
    http://www.openwall.com/lists/oss-security/2023/07/25/16
    http://www.openwall.com/lists/oss-security/2023/07/25/17
    http://www.openwall.com/lists/oss-security/2023/07/25/5
    http://www.openwall.com/lists/oss-security/2023/07/25/6
    http://www.openwall.com/lists/oss-security/2023/07/26/1
    http://www.openwall.com/lists/oss-security/2023/07/31/2
    http://www.openwall.com/lists/oss-security/2023/08/08/6
    http://www.openwall.com/lists/oss-security/2023/08/08/7
    http://www.openwall.com/lists/oss-security/2023/08/08/8
    http://www.openwall.com/lists/oss-security/2023/08/16/4
    http://www.openwall.com/lists/oss-security/2023/08/16/5
    http://www.openwall.com/lists/oss-security/2023/09/22/11
    http://www.openwall.com/lists/oss-security/2023/09/22/9
    http://www.openwall.com/lists/oss-security/2023/09/25/4
    http://www.openwall.com/lists/oss-security/2023/09/25/7
    http://xenbits.xen.org/xsa/advisory-433.html
    https://cmpxchg8b.com/zenbleed.html
    https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html
    https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html
    https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
    https://lists.fedoraproject.org/archives/list/[email protected]/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/
    https://security.netapp.com/advisory/ntap-20240531-0004/
    https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008
    https://www.debian.org/security/2023/dsa-5459
    https://www.debian.org/security/2023/dsa-5461
    https://www.debian.org/security/2023/dsa-5462

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High