Is CVE-2023-20588 actively exploited?

CVE-2023-20588 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2023-20588?

CVE-2023-20588 has a CVSS score of 5.5 (MEDIUM severity). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

How do I patch CVE-2023-20588?

Patch guidance is available from debian security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2023-20588.

CVE-2023-20588 - remediation guidance & executive summary

Q: Which products are affected by CVE-2023-20588?

53 products: debian debian linux, debian debian linux, debian debian linux, amd epyc 7351p firmware, amd epyc 7401p firmware, and 48 more.

Description

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVSS Metrics

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector: local
Complexity: low
Privileges: low
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: none
Availability: none
Weaknesses: CWE-369

Metadata

Primary Vendor: DEBIAN
Published: 8/8/2023
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

debian : debian_linuxdebian : debian_linuxdebian : debian_linuxamd : epyc_7351p_firmwareamd : epyc_7401p_firmwareamd : epyc_7551p_firmwareamd : epyc_7251_firmwareamd : epyc_7261_firmwareamd : epyc_7281_firmwareamd : epyc_7301_firmwareamd : epyc_7351_firmwareamd : epyc_7371_firmwareamd : epyc_7401_firmwareamd : epyc_7451_firmwareamd : epyc_7501_firmwareamd : epyc_7551_firmwareamd : epyc_7571_firmwareamd : epyc_7601_firmwareamd : ryzen_5_pro_3400g_firmwareamd : ryzen_5_3400g_firmwareamd : ryzen_5_pro_3400ge_firmwareamd : ryzen_5_pro_3350g_firmwareamd : ryzen_5_pro_3350ge_firmwareamd : ryzen_3_pro_3200g_firmwareamd : ryzen_3_3200g_firmwareamd : ryzen_3_3200ge_firmwareamd : ryzen_3_pro_3200ge_firmwareamd : athlon_pro_300ge_firmwareamd : athlon_gold_3150ge_firmwareamd : athlon_gold_pro_3150ge_firmwareamd : athlon_gold_3150g_firmwareamd : athlon_gold_pro_3150g_firmwareamd : athlon_silver_3050ge_firmwareamd : athlon_silver_pro_3125ge_firmwarexen : xenfedoraproject : fedorafedoraproject : fedorafedoraproject : fedoramicrosoft : windows_10_1507microsoft : windows_10_1607microsoft : windows_10_1809microsoft : windows_10_21h2microsoft : windows_10_22h2microsoft : windows_11_21h2microsoft : windows_11_22h2microsoft : windows_11_23h2microsoft : windows_server_2008microsoft : windows_server_2008microsoft : windows_server_2012microsoft : windows_server_2012microsoft : windows_server_2016microsoft : windows_server_2019microsoft : windows_server_2022_23h2

Remediation Guidance

Executive Summary

View on NIST NVD