CVE-2023-20593

MEDIUMMonitor

Published:Jul 24, 2023(2 years ago)

Modified:Feb 13, 2025

Local AccessNo InteractionLow Complexity

Vulnerability Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Attack Characteristics

Local AccessLow ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
xen	xen	-	-
xen	xen	-	-
xen	xen	-

Timeline

Published
CVE disclosed publicly
Jul 24, 20232 years ago
Last Modified
Most recent update
Feb 13, 20251 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://seclists.org/fulldisclosure/2023/Jul/43Not Applicable
http://www.openwall.com/lists/oss-security/2023/07/24/3Mailing List
http://www.openwall.com/lists/oss-security/2023/07/25/1Mailing List

CVSS Score

v3.1

5.5/ 10.0

MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

At a Glance

Affected Products

References

xen / xen

http://www.openwall.com/lists/oss-security/2023/07/25/12Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/13Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/14Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/15Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/16Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/17Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/5Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/6Mailing List

http://www.openwall.com/lists/oss-security/2023/07/26/1Mailing List

http://www.openwall.com/lists/oss-security/2023/07/31/2Mailing List

http://www.openwall.com/lists/oss-security/2023/08/08/6

http://www.openwall.com/lists/oss-security/2023/08/08/7

http://www.openwall.com/lists/oss-security/2023/08/08/8

http://www.openwall.com/lists/oss-security/2023/08/16/4

http://www.openwall.com/lists/oss-security/2023/08/16/5

http://www.openwall.com/lists/oss-security/2023/09/22/11

http://www.openwall.com/lists/oss-security/2023/09/22/9

http://www.openwall.com/lists/oss-security/2023/09/25/4

http://www.openwall.com/lists/oss-security/2023/09/25/7

http://xenbits.xen.org/xsa/advisory-433.htmlMitigation

https://cmpxchg8b.com/zenbleed.htmlExploit

https://lists.debian.org/debian-lts-announce/2023/07/msg00030.htmlMailing List

https://lists.debian.org/debian-lts-announce/2023/07/msg00033.htmlMailing List

https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.f...

https://security.netapp.com/advisory/ntap-20240531-0004/

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008Vendor Advisory

https://www.debian.org/security/2023/dsa-5459Third Party Advisory

https://www.debian.org/security/2023/dsa-5461Third Party Advisory

https://www.debian.org/security/2023/dsa-5462Third Party Advisory

http://seclists.org/fulldisclosure/2023/Jul/43Not Applicable

http://www.openwall.com/lists/oss-security/2023/07/24/3Mailing List

http://www.openwall.com/lists/oss-security/2023/07/25/1Mailing List