CVE-2023-20588
Medium
Description
A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Debian Linux
PublishedAug 8, 2023
First seenAug 8, 2023
How to fix
Update
- microsoft windows_10_150710.0.10240.20345 or later
- microsoft windows_10_160710.0.14393.6529 or later
- microsoft windows_10_180910.0.17763.5206 or later
- microsoft windows_10_21h210.0.19044.3803 or later
- microsoft windows_10_22h210.0.19045.3803 or later
- microsoft windows_11_21h210.0.22000.2652 or later
- microsoft windows_11_22h210.0.22621.2861 or later
- microsoft windows_11_23h210.0.22631.2861 or later
- microsoft windows_server_201610.0.14393.6529 or later
- microsoft windows_server_201910.0.17763.5206 or later
- microsoft windows_server_2022_23h210.0.25398.584 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian debian_linux | 10.0, 11.0, 12.0 | — |
| amd epyc_7351p_firmware | No range specified | — |
| amd epyc_7401p_firmware | No range specified | — |
| amd epyc_7551p_firmware | No range specified | — |
| amd epyc_7251_firmware | No range specified | — |
| amd epyc_7261_firmware | No range specified | — |
| amd epyc_7281_firmware | No range specified | — |
| amd epyc_7301_firmware | No range specified | — |
| amd epyc_7351_firmware | No range specified | — |
| amd epyc_7371_firmware | No range specified | — |
| amd epyc_7401_firmware | No range specified | — |
| amd epyc_7451_firmware | No range specified | — |
| amd epyc_7501_firmware | No range specified | — |
| amd epyc_7551_firmware | No range specified | — |
| amd epyc_7571_firmware | No range specified | — |
| amd epyc_7601_firmware | No range specified | — |
| amd ryzen_5_pro_3400g_firmware | No range specified | — |
| amd ryzen_5_3400g_firmware | No range specified | — |
| amd ryzen_5_pro_3400ge_firmware | No range specified | — |
| amd ryzen_5_pro_3350g_firmware | No range specified | — |
| amd ryzen_5_pro_3350ge_firmware | No range specified | — |
| amd ryzen_3_pro_3200g_firmware | No range specified | — |
| amd ryzen_3_3200g_firmware | No range specified | — |
| amd ryzen_3_3200ge_firmware | No range specified | — |
| amd ryzen_3_pro_3200ge_firmware | No range specified | — |
| amd athlon_pro_300ge_firmware | No range specified | — |
| amd athlon_gold_3150ge_firmware | No range specified | — |
| amd athlon_gold_pro_3150ge_firmware | No range specified | — |
| amd athlon_gold_3150g_firmware | No range specified | — |
| amd athlon_gold_pro_3150g_firmware | No range specified | — |
| amd athlon_silver_3050ge_firmware | No range specified | — |
| amd athlon_silver_pro_3125ge_firmware | No range specified | — |
| xen xen | No range specified | — |
| fedoraproject fedora | 37, 38, 39 | — |
| microsoft windows_10_1507 | v < 10.0.10240.20345 | 10.0.10240.20345 |
| microsoft windows_10_1607 | v < 10.0.14393.6529 | 10.0.14393.6529 |
| microsoft windows_10_1809 | v < 10.0.17763.5206 | 10.0.17763.5206 |
| microsoft windows_10_21h2 | v < 10.0.19044.3803 | 10.0.19044.3803 |
| microsoft windows_10_22h2 | v < 10.0.19045.3803 | 10.0.19045.3803 |
| microsoft windows_11_21h2 | v < 10.0.22000.2652 | 10.0.22000.2652 |
| microsoft windows_11_22h2 | v < 10.0.22621.2861 | 10.0.22621.2861 |
| microsoft windows_11_23h2 | v < 10.0.22631.2861 | 10.0.22631.2861 |
| microsoft windows_server_2008 | No range specified, r2 | — |
| microsoft windows_server_2012 | No range specified, r2 | — |
| microsoft windows_server_2016 | v < 10.0.14393.6529 | 10.0.14393.6529 |
| microsoft windows_server_2019 | v < 10.0.17763.5206 | 10.0.17763.5206 |
| microsoft windows_server_2022_23h2 | v < 10.0.25398.584 | 10.0.25398.584 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.