CVE-2023-20566 : Improper address validation in ASP with SNP enabled may potentially allow an att

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.

Published 2023-11-14 19:15:16

Updated 2024-06-18 19:15:59

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2023-20566

AMD » Epyc 7763 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7763 » Version: N/A
AMD » Epyc 7713p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713p » Version: N/A
AMD » Epyc 7713 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713 » Version: N/A
AMD » Epyc 7663 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663 » Version: N/A
AMD » Epyc 7643 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643 » Version: N/A
AMD » Epyc 75f3 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 75f3 » Version: N/A
AMD » Epyc 7543p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543p » Version: N/A
AMD » Epyc 7543 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543 » Version: N/A
AMD » Epyc 7513 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7513 » Version: N/A
AMD » Epyc 7453 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7453 » Version: N/A
AMD » Epyc 74f3 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 74f3 » Version: N/A
AMD » Epyc 7443p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443p » Version: N/A
AMD » Epyc 7443 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443 » Version: N/A
AMD » Epyc 7413 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7413 » Version: N/A
AMD » Epyc 73f3 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 73f3 » Version: N/A
AMD » Epyc 7343 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7343 » Version: N/A
AMD » Epyc 7313p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313p » Version: N/A
AMD » Epyc 7313 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313 » Version: N/A
AMD » Epyc 72f3 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 72f3 » Version: N/A
AMD » Epyc 7773x Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7773x » Version: N/A
AMD » Epyc 7473x Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7473x » Version: N/A
AMD » Epyc 7573x Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7573x » Version: N/A
AMD » Epyc 7373x Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7373x » Version: N/A
AMD » Epyc 9124 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9124 » Version: N/A
AMD » Epyc 9174f Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9174f » Version: N/A
AMD » Epyc 9184x Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9184x » Version: N/A
AMD » Epyc 9224 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9224 » Version: N/A
AMD » Epyc 9254 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9254 » Version: N/A
AMD » Epyc 9274f Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9274f » Version: N/A
AMD » Epyc 9334 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9334 » Version: N/A
AMD » Epyc 9354 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9354 » Version: N/A
AMD » Epyc 9354p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9354p » Version: N/A
AMD » Epyc 9374f Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9374f » Version: N/A
AMD » Epyc 9384x Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9384x » Version: N/A
AMD » Epyc 9454 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9454 » Version: N/A
AMD » Epyc 9454p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9454p » Version: N/A
AMD » Epyc 9474f Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9474f » Version: N/A
AMD » Epyc 9534 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9534 » Version: N/A
AMD » Epyc 9554p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9554p » Version: N/A
AMD » Epyc 9554 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9554 » Version: N/A
AMD » Epyc 9634 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9634 » Version: N/A
AMD » Epyc 9654 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9654 » Version: N/A
AMD » Epyc 9654p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9654p » Version: N/A
AMD » Epyc 9684x Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9684x » Version: N/A
AMD » Epyc 9734 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9734 » Version: N/A
AMD » Epyc 9754 Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9754 » Version: N/A
AMD » Epyc 9754s Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9754s » Version: N/A
AMD » Epyc 7203 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7203 » Version: N/A
AMD » Epyc 7203p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7203p » Version: N/A
AMD » Epyc 7303 Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7303 » Version: N/A
AMD » Epyc 7303p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7303p » Version: N/A
AMD » Epyc 7643p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643p » Version: N/A
AMD » Epyc 7663p Firmware
Versions before (<) milanpi_1.0.0.b
cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663p » Version: N/A
AMD » Epyc 8024pn Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8024pn » Version: N/A
AMD » Epyc 8024p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8024p » Version: N/A
AMD » Epyc 8124pn Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8124pn » Version: N/A
AMD » Epyc 8124p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8124p » Version: N/A
AMD » Epyc 8224pn Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8224pn » Version: N/A
AMD » Epyc 8224p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8224p » Version: N/A
AMD » Epyc 8324pn Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8324pn » Version: N/A
AMD » Epyc 8324p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8324p » Version: N/A
AMD » Epyc 8434pn Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8434pn » Version: N/A
AMD » Epyc 8434p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8434p » Version: N/A
AMD » Epyc 8534pn Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8534pn » Version: N/A
AMD » Epyc 8534p Firmware
Versions before (<) genoapi_1.0.0.7
cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8534p » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20566

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 30 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20566

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: None
5.3	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N	0.8	4.0	Advanced Micro Devices Inc.	2024-06-18
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: None Integrity: High Availability: None

References for CVE-2023-20566

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002

AMD Server Vulnerabilities – Nov 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-20566

Products affected by CVE-2023-20566

Exploit prediction scoring system (EPSS) score for CVE-2023-20566

CVSS scores for CVE-2023-20566

References for CVE-2023-20566