CVE-2023-20588 : A division-by-zero error on some AMD processors can potentially return speculati

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

Published 2023-08-08 18:15:12

Updated 2024-06-10 18:15:20

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2023-20588

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 12.0
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: N/A Update SP2
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2008 » Version: R2 Update SP1 For X64
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
Matching versions
Microsoft » Windows Server 2012 » Version: N/A
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2012 » Version: R2
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2016
Versions before (<) 10.0.14393.6529
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2019
Versions before (<) 10.0.17763.5206
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 11 21h2
Versions before (<) 10.0.22000.2652
cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 11 22h2
Versions before (<) 10.0.22621.2861
cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1607
Versions before (<) 10.0.14393.6529
cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1809
Versions before (<) 10.0.17763.5206
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 21h2
Versions before (<) 10.0.19044.3803
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 22h2
Versions before (<) 10.0.19045.3803
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 10 1507
Versions before (<) 10.0.10240.20345
cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows 11 23h2
Versions before (<) 10.0.22631.2861
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows Server 2022 23h2
Versions before (<) 10.0.25398.584
cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*
Matching versions
XEN » XEN » Version: N/A
cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 37
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 38
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 39
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Matching versions
AMD » Epyc 7601 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7601_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7601 » Version: N/A
AMD » Epyc 7551p Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7551p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7551p » Version: N/A
AMD » Epyc 7551 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7551_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7551 » Version: N/A
AMD » Epyc 7501 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7501_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7501 » Version: N/A
AMD » Epyc 7451 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7451_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7451 » Version: N/A
AMD » Epyc 7401 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7401_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7401 » Version: N/A
AMD » Epyc 7371 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7371_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7371 » Version: N/A
AMD » Epyc 7351p Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7351p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7351p » Version: N/A
AMD » Epyc 7351 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7351_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7351 » Version: N/A
AMD » Epyc 7301 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7301_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7301 » Version: N/A
AMD » Epyc 7281 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7281_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7281 » Version: N/A
AMD » Epyc 7261 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7261_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7261 » Version: N/A
AMD » Epyc 7251 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7251_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7251 » Version: N/A
AMD » Epyc 7401p Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7401p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7401p » Version: N/A
AMD » Athlon Gold Pro 3150g Firmware » Version: N/A
cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold Pro 3150g » Version: N/A
AMD » Athlon Gold Pro 3150ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold Pro 3150ge » Version: N/A
AMD » Athlon Silver Pro 3125ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_silver_pro_3125ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Silver Pro 3125ge » Version: N/A
AMD » Athlon Pro 300ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Pro 300ge » Version: N/A
AMD » Ryzen 5 3400g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_3400g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3400g » Version: N/A
AMD » Athlon Gold 3150ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_gold_3150ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold 3150ge » Version: N/A
AMD » Athlon Silver 3050ge Firmware » Version: N/A
cpe:2.3:o:amd:athlon_silver_3050ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Silver 3050ge » Version: N/A
AMD » Ryzen 3 Pro 3200ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_3_pro_3200ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 Pro 3200ge » Version: N/A
AMD » Ryzen 3 3200g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_3_3200g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 3200g » Version: N/A
AMD » Ryzen 3 Pro 3200g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_3_pro_3200g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 Pro 3200g » Version: N/A
AMD » Ryzen 5 Pro 3350ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_pro_3350ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 Pro 3350ge » Version: N/A
AMD » Ryzen 5 Pro 3350g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_pro_3350g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 Pro 3350g » Version: N/A
AMD » Ryzen 5 Pro 3400ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_pro_3400ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 Pro 3400ge » Version: N/A
AMD » Ryzen 5 Pro 3400g Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_5_pro_3400g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 Pro 3400g » Version: N/A
AMD » Athlon Gold 3150g Firmware » Version: N/A
cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold 3150g » Version: N/A
AMD » Epyc 7571 Firmware » Version: N/A
cpe:2.3:o:amd:epyc_7571_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7571 » Version: N/A
AMD » Ryzen 3 3200ge Firmware » Version: N/A
cpe:2.3:o:amd:ryzen_3_3200ge_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 3200ge » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20588

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 18 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20588

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2023-20588

CWE-369 Divide By Zero

The product divides a value by zero.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-20588

http://www.openwall.com/lists/oss-security/2023/09/26/8

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/14

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/12

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/3

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
https://www.debian.org/security/2023/dsa-5480

Debian -- Security Information -- DSA-5480-1 linux
Third Party Advisory

CVEs referencing this url
http://xenbits.xen.org/xsa/advisory-439.html

XSA-439 - Xen Security Advisories
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/4

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2023/09/25/7

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.debian.org/security/2023/dsa-5492

Debian -- Security Information -- DSA-5492-1 linux
Third Party Advisory

CVEs referencing this url
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7007

Speculative Leaks Security Notice
Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/9

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/26/9

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/26/5

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJTUVYZMP6BNF342DS3W7XGOGXC6JPN5/

[SECURITY] Fedora 38 Update: xen-4.17.2-2.fc38 - package-announce - Fedora Mailing-Lists
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIOYP4ZOBML4RCUM3MHRFZUQL445MZM3/

[SECURITY] Fedora 37 Update: xen-4.16.5-2.fc37 - package-announce - Fedora Mailing-Lists
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AGZCACEHT6ZZZGG36QQMGROBM4FLWYJX/

[SECURITY] Fedora 39 Update: xen-4.17.2-2.fc39 - package-announce - Fedora Mailing-Lists
Mailing List
http://www.openwall.com/lists/oss-security/2023/10/04/4

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/16

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html

[SECURITY] [DLA 3623-1] linux-5.10 security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2023/09/25/8

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/15

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/27/1

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/5

oss-security - Xen Security Advisory 439 v2 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/2

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/04/1

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
https://security.netapp.com/advisory/ntap-20240531-0005/

CVE-2023-20588 Debian Vulnerability in NetApp Products | NetApp Product Security
http://www.openwall.com/lists/oss-security/2023/10/03/13

oss-security - Re: Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/25/3

oss-security - Xen Security Advisory 439 v1 (CVE-2023-20588) - x86/AMD: Divide speculative information leak
Mailing List;Third Party Advisory

Jump to

Vulnerability Details : CVE-2023-20588

Products affected by CVE-2023-20588

Exploit prediction scoring system (EPSS) score for CVE-2023-20588

CVSS scores for CVE-2023-20588

CWE ids for CVE-2023-20588

References for CVE-2023-20588