CVE-2020-12965 : When combined with specific software sequences, AMD CPUs may transiently execute

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

Published 2022-02-04 23:15:10

Updated 2023-12-06 03:15:07

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2020-12965

AMD » Ryzen Pro 5650g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_5650g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 5650g » Version: N/A
AMD » Ryzen Pro 5650ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_5650ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 5650ge » Version: N/A
AMD » Ryzen Pro 5750g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_5750g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 5750g » Version: N/A
AMD » Ryzen Pro 5750ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_5750ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 5750ge » Version: N/A
AMD » Ryzen Pro 5350g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_5350g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 5350g » Version: N/A
AMD » Ryzen Pro 5350ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_5350ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 5350ge » Version: N/A
AMD » Ryzen Pro 4750g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_4750g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 4750g » Version: N/A
AMD » Ryzen Pro 4750ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_4750ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 4750ge » Version: N/A
AMD » Ryzen Pro 4650g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_4650g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 4650g » Version: N/A
AMD » Ryzen Pro 4650ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_4650ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 4650ge » Version: N/A
AMD » Ryzen Pro 4350g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_4350g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 4350g » Version: N/A
AMD » Ryzen Pro 4350ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_4350ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 4350ge » Version: N/A
AMD » Ryzen Pro 3900 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3900_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3900 » Version: N/A
AMD » Ryzen Pro 3700 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3700_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3700 » Version: N/A
AMD » Ryzen Pro 3600 Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3600_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3600 » Version: N/A
AMD » Ryzen Pro 3400g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3400g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3400g » Version: N/A
AMD » Ryzen Pro 3400ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3400ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3400ge » Version: N/A
AMD » Ryzen Pro 3350g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3350g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3350g » Version: N/A
AMD » Ryzen Pro 3200g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3200g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3200g » Version: N/A
AMD » Ryzen Pro 3200ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_3200ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 3200ge » Version: N/A
AMD » Ryzen Pro 2400g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_2400g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 2400g » Version: N/A
AMD » Ryzen Pro 2400ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_2400ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 2400ge » Version: N/A
AMD » Ryzen Pro 2200g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_2200g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 2200g » Version: N/A
AMD » Ryzen Pro 2200ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_pro_2200ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Pro 2200ge » Version: N/A
AMD » Ryzen Threadripper Pro 3995wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3995wx » Version: N/A
AMD » Ryzen Threadripper Pro 3975wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3975wx » Version: N/A
AMD » Ryzen Threadripper Pro 3955wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3955wx » Version: N/A
AMD » Ryzen Threadripper Pro 3945wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper Pro 3945wx » Version: N/A
AMD » Athlon Gold Pro 3150g Firmware » Version: N/A
cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold Pro 3150g » Version: N/A
AMD » Athlon Gold Pro 3150ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold Pro 3150ge » Version: N/A
AMD » Athlon Silver Pro 3125ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_silver_pro_3125ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Silver Pro 3125ge » Version: N/A
AMD » Athlon Pro 300ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Pro 300ge » Version: N/A
AMD » Athlon Pro 200ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_pro_200ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Pro 200ge » Version: N/A
AMD » Ryzen Threadripper 3990x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 3990x » Version: N/A
AMD » Ryzen Threadripper 3970x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 3970x » Version: N/A
AMD » Ryzen Threadripper 3960x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 3960x » Version: N/A
AMD » Ryzen Threadripper 2990wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 2990wx » Version: N/A
AMD » Ryzen Threadripper 2970wx Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 2970wx » Version: N/A
AMD » Ryzen Threadripper 2950x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 2950x » Version: N/A
AMD » Ryzen Threadripper 2920x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 2920x » Version: N/A
AMD » Ryzen Threadripper 1950x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_1950x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 1950x » Version: N/A
AMD » Ryzen Threadripper 1920x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_1920x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 1920x » Version: N/A
AMD » Ryzen Threadripper 1900x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_threadripper_1900x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen Threadripper 1900x » Version: N/A
AMD » Ryzen 5950x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5950x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5950x » Version: N/A
AMD » Ryzen 5800x3d Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5800x3d_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5800x3d » Version: N/A
AMD » Ryzen 5900x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5900x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5900x » Version: N/A
AMD » Ryzen 5800x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5800x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5800x » Version: N/A
AMD » Ryzen 5600x Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5600x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5600x » Version: N/A
AMD » Ryzen 5700g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5700g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5700g » Version: N/A
AMD » Ryzen 5600g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5600g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5600g » Version: N/A
AMD » Ryzen 5700ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5700ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5700ge » Version: N/A
AMD » Ryzen 5600ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5600ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5600ge » Version: N/A
AMD » Ryzen 5300g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5300g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5300g » Version: N/A
AMD » Ryzen 5300ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5300ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5300ge » Version: N/A
AMD » Ryzen 4700g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_4700g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 4700g » Version: N/A
AMD » Ryzen 4600g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_4600g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 4600g » Version: N/A
AMD » Ryzen 4300g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_4300g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 4300g » Version: N/A
AMD » Ryzen 4700ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_4700ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 4700ge » Version: N/A
AMD » Ryzen 4600ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_4600ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 4600ge » Version: N/A
AMD » Ryzen 4300ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_4300ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 4300ge » Version: N/A
AMD » Athlon 3150ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_3150ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon 3150ge » Version: N/A
AMD » Athlon 3150g Firmware » Version: N/A
cpe:2.3:o:amd:athlon_3150g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon 3150g » Version: N/A
AMD » Athlon 3050ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_3050ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon 3050ge » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-12965

EPSS FAQ

0.55%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 67 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-12965

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2020-12965

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-12965

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010

Access Denied
Mitigation;Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/12/05/3

oss-security - SLAM: Spectre based on Linear Address Masking

Jump to

Vulnerability Details : CVE-2020-12965

Products affected by CVE-2020-12965

Exploit prediction scoring system (EPSS) score for CVE-2020-12965

CVSS scores for CVE-2020-12965

CWE ids for CVE-2020-12965

References for CVE-2020-12965