Back to the CVE list
CVE-2023-20569

Vulnerability in Fedoraproject

CVSS score

4.7

EPSS probability

%7.3

Risk score

0.3

Published

3 y ago

OverviewPublic Exploits (1)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2023-20569 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2023-20569 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1fedoraprojectfedora View
2fedoraprojectfedora View
3debiandebian linux View
4debiandebian linux View
5debiandebian linux View
6amdryzen 9 5950x firmware View
7amdryzen 9 5950x View
8amdryzen 9 5900x firmware View
9amdryzen 9 5900x View
10amdryzen 9 5900 firmware View
11amdryzen 9 5900 View
12amdryzen 9 pro 5945 firmware View
13amdryzen 9 pro 5945 View
14amdryzen 7 5800x3d firmware View
15amdryzen 7 5800x3d View
16amdryzen 7 5800x firmware View
17amdryzen 7 5800x View
18amdryzen 7 5800 firmware View
19amdryzen 7 5800 View
20amdryzen 7 5700x firmware View
21amdryzen 7 5700x View
22amdryzen 7 pro 5845 firmware View
23amdryzen 7 pro 5845 View
24amdryzen 5 5600x3d firmware View
25amdryzen 5 5600x3d View
26amdryzen 5 5600x firmware View
27amdryzen 5 5600x View
28amdryzen 5 5600 firmware View
29amdryzen 5 5600 View
30amdryzen 5 pro 5645 firmware View
31amdryzen 5 pro 5645 View
32amdryzen 7 5700 firmware View
33amdryzen 7 5700 View
34amdryzen 5 5500 firmware View
35amdryzen 5 5500 View
36amdryzen 3 5100 firmware View
37amdryzen 3 5100 View
38amdryzen 7 5700g firmware View
39amdryzen 7 5700g View
40amdryzen 7 5700ge firmware View
41amdryzen 7 5700ge View
42amdryzen 5 5600g firmware View
43amdryzen 5 5600g View
44amdryzen 5 5600ge firmware View
45amdryzen 5 5600ge View
46amdryzen 3 5300g firmware View
47amdryzen 3 5300g View
48amdryzen 3 5300ge firmware View
49amdryzen 3 5300ge View
50amdryzen 9 7950x3d firmware View
51amdryzen 9 7950x3d View
52amdryzen 9 7950x firmware View
53amdryzen 9 7950x View
54amdryzen 9 7900x3d firmware View
55amdryzen 9 7900x3d View
56amdryzen 9 7900x firmware View
57amdryzen 9 7900x View
58amdryzen 9 7900 firmware View
59amdryzen 9 7900 View
60amdryzen 9 pro 7945 firmware View
61amdryzen 9 pro 7945 View
62amdryzen 7 7800x3d firmware View
63amdryzen 7 7800x3d View
64amdryzen 7 7700x firmware View
65amdryzen 7 7700x View
66amdryzen 7 7700 firmware View
67amdryzen 7 7700 View
68amdryzen 7 pro 7745 firmware View
69amdryzen 7 pro 7745 View
70amdryzen 5 7600x firmware View
71amdryzen 5 7600x View
72amdryzen 5 7600 firmware View
73amdryzen 5 7600 View
74amdryzen 5 pro 7645 firmware View
75amdryzen 5 pro 7645 View
76amdryzen 5 7500f firmware View
77amdryzen 5 7500f View
78amdryzen threadripper pro 5995wx firmware View
79amdryzen threadripper pro 5995wx View
80amdryzen threadripper pro 5975wx firmware View
81amdryzen threadripper pro 5975wx View
82amdryzen threadripper pro 5965wx firmware View
83amdryzen threadripper pro 5965wx View
84amdryzen threadripper pro 5955wx firmware View
85amdryzen threadripper pro 5955wx View
86amdryzen threadripper pro 5945wx firmware View
87amdryzen threadripper pro 5945wx View
88amdryzen 7 5700u firmware View
89amdryzen 7 5700u View
90amdryzen 5 5500u firmware View
91amdryzen 5 5500u View
92amdryzen 3 5300u firmware View
93amdryzen 3 5300u View
94amdryzen 9 5980hx firmware View
95amdryzen 9 5980hx View
96amdryzen 9 5980hs firmware View
97amdryzen 9 5980hs View
98amdryzen 9 5900hx firmware View
99amdryzen 9 5900hx View
100amdryzen 9 5900hs firmware View
101amdryzen 9 5900hs View
102amdryzen 7 5800h firmware View
103amdryzen 7 5800h View
104amdryzen 7 5800hs firmware View
105amdryzen 7 5800hs View
106amdryzen 7 5825u firmware View
107amdryzen 7 5825u View
108amdryzen 7 5800u firmware View
109amdryzen 7 5800u View
110amdryzen 5 5600h firmware View
111amdryzen 5 5600h View
112amdryzen 5 5600hs firmware View
113amdryzen 5 5600hs View
114amdryzen 5 5625u firmware View
115amdryzen 5 5625u View
116amdryzen 5 5600u firmware View
117amdryzen 5 5600u View
118amdryzen 5 5560u firmware View
119amdryzen 5 5560u View
120amdryzen 3 5425u firmware View
121amdryzen 3 5425u View
122amdryzen 3 5400u firmware View
123amdryzen 3 5400u View
124amdryzen 3 5125c firmware View
125amdryzen 3 5125c View
126amdryzen 9 6980hx firmware View
127amdryzen 9 6980hx View
128amdryzen 9 6980hs firmware View
129amdryzen 9 6980hs View
130amdryzen 9 6900hx firmware View
131amdryzen 9 6900hx View
132amdryzen 9 6900hs firmware View
133amdryzen 9 6900hs View
134amdryzen 7 6800h firmware View
135amdryzen 7 6800h View
136amdryzen 7 6800hs firmware View
137amdryzen 7 6800hs View
138amdryzen 7 6800u firmware View
139amdryzen 7 6800u View
140amdryzen 5 6600h firmware View
141amdryzen 5 6600h View
142amdryzen 5 6600hs firmware View
143amdryzen 5 6600hs View
144amdryzen 5 6600u firmware View
145amdryzen 5 6600u View
146amdryzen 7 7735hs firmware View
147amdryzen 7 7735hs View
148amdryzen 7 7736u firmware View
149amdryzen 7 7736u View
150amdryzen 7 7735u firmware View
151amdryzen 7 7735u View
152amdryzen 5 7535hs firmware View
153amdryzen 5 7535hs View
154amdryzen 5 7535u firmware View
155amdryzen 5 7535u View
156amdryzen 3 7335u firmware View
157amdryzen 3 7335u View
158amdryzen 7 pro 7730u firmware View
159amdryzen 7 pro 7730u View
160amdryzen 5 pro 7530u firmware View
161amdryzen 5 pro 7530u View
162amdryzen 3 pro 7330u firmware View
163amdryzen 3 pro 7330u View
164amdryzen 9 pro 7640hs firmware View
165amdryzen 9 pro 7640hs View
166amdryzen 9 7940h firmware View
167amdryzen 9 7940h View
168amdryzen 7 pro 7840hs firmware View
169amdryzen 7 pro 7840hs View
170amdryzen 7 7840h firmware View
171amdryzen 7 7840h View
172amdryzen 7 7840u firmware View
173amdryzen 7 7840u View
174amdryzen 5 pro 7640hs firmware View
175amdryzen 5 pro 7640hs View
176amdryzen 5 7640h firmware View
177amdryzen 5 7640h View
178amdryzen 5 7640u firmware View
179amdryzen 5 7640u View
180amdryzen 5 7540u firmware View
181amdryzen 5 7540u View
182amdryzen 3 7440u firmware View
183amdryzen 3 7440u View
184amdryzen 9 7945hx3d firmware View
185amdryzen 9 7945hx3d View
186amdryzen 9 7945hx firmware View
187amdryzen 9 7945hx View
188amdryzen 9 7845hx firmware View
189amdryzen 9 7845hx View
190amdryzen 7 7745hx firmware View
191amdryzen 7 7745hx View
192amdryzen 5 7645hx firmware View
193amdryzen 5 7645hx View
194amdepyc 7773x firmware View
195amdepyc 7773x View
196amdepyc 7763 firmware View
197amdepyc 7763 View
198amdepyc 7713 firmware View
199amdepyc 7713 View
200amdepyc 7713p firmware View
Total affected vendors: 3|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
4.7CVSS V31MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

CVE-2023-20569 : the database holds 1 public PoC/exploit sources for it. For direct links to the sources, open the Public Exploits tab.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2023-20569 is associated with the following CWEs:

CWE-203: Common Weakness Enumeration Entry CWE-203

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2023-20569 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

http://www.openwall.com/lists/oss-security/2023/08/08/4nvdhttp://xenbits.xen.org/xsa/advisory-434.htmlnvdhttps://lists.debian.org/debian-lts-announce/2023/08/msg00013.htmlnvdhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/nvdhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L4E4TZNMLYL2KETY23IPA43QXFAVJ46V/nvdhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKK3IA63LSKM4EC3TN4UM6DDEIOWEQIG/nvdhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T7WO5JM74YJSYAE5RBV4DC6A4YLEKWLF/nvdhttps://security.netapp.com/advisory/ntap-20240605-0006/nvdhttps://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7005vendor-advisoryhttps://www.debian.org/security/2023/dsa-5475nvd

CVSS Vector Radar Chart

4.7 / 10
Attack VectorLocalComplexityHighPrivilegesLowUser Interact.NoneConfidentialityHighIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)High
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

F
fedoraproject logo
fedoraproject
D
debian logo
debian
A
amd logo
amd

Weakness Type (CWE & CAPEC)

CWE-203

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-20569"