CVE-2023-20579 - OpenCVE

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2023-20579
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html
https://www.cve.org/CVERecord?id=CVE-2023-20579

History

No history.

MITRE

Status: PUBLISHED

Assigner: AMD

Published: 2024-02-13T19:32:11.904Z

Updated: 2024-08-02T09:05:36.910Z

Reserved: 2022-10-27T18:53:39.757Z

Link: CVE-2023-20579

Vulnrichment

Updated: 2024-08-02T09:05:36.910Z

NVD

Status : Awaiting Analysis

Published: 2024-02-13T20:15:52.577

Modified: 2024-02-14T13:59:35.580

Link: CVE-2023-20579

Redhat

Severity : Important

Publid Date: 2024-02-13T00:00:00Z

Links: CVE-2023-20579 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-20579", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2022-10-27T18:53:39.757Z", "datePublished": "2024-02-13T19:32:11.904Z", "dateUpdated": "2024-08-02T09:05:36.910Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 7000 Series Desktop Processor ", "vendor": "AMD", "versions": [{"status": "affected", "version": "Various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 4000 Series Desktop Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 7045 Series Mobile Processors ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various "}]}, {"defaultStatus": "unaffected", "packageName": "PI", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various"}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 Embedded V2000", "vendor": "AMD", "versions": [{"status": "affected", "version": "various"}]}, {"defaultStatus": "unaffected", "packageName": "PI", "platforms": ["x86"], "product": "AMD Ryzen\u2122 Embedded V3000", "vendor": "AMD", "versions": [{"status": "affected", "version": "various"}]}, {"defaultStatus": "unaffected", "platforms": ["x86"], "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various"}]}, {"defaultStatus": "unaffected", "platforms": ["x86"], "product": "AMD Ryzen\u2122 7035 Series Mobile Processors with Radeon\u2122 Graphics ", "vendor": "AMD", "versions": [{"status": "affected", "version": "various"}]}, {"defaultStatus": "unaffected", "platforms": ["x86"], "product": "AMD Ryzen\u2122 3000 Series Processors with Radeon\u2122 Graphics", "vendor": "AMD", "versions": [{"status": "affected", "version": "various"}]}], "datePublic": "2024-02-13T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper\nAccess Control in the AMD SPI protection feature may allow a user with Ring0\n(kernel mode) privileged access to bypass protections potentially resulting in\nloss of integrity and availability.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n<br>"}], "value": "Improper\nAccess Control in the AMD SPI protection feature may allow a user with Ring0\n(kernel mode) privileged access to bypass protections potentially resulting in\nloss of integrity and availability.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n"}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-02-13T19:32:11.904Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009"}], "source": {"advisory": "AMD-SB-7009", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-20579", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-14T15:53:23.792810Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:20:09.206Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:05:36.910Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:05:36.910Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-20579", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-14T15:53:23.792810Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:11.379Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"advisory": "AMD-SB-7009", "discovery": "UNKNOWN"}, "affected": [{"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7000 Series Desktop Processor ", "versions": [{"status": "affected", "version": "Various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 4000 Series Desktop Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7045 Series Mobile Processors ", "versions": [{"status": "affected", "version": "various "}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various"}], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V2000", "versions": [{"status": "affected", "version": "various"}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded V3000", "versions": [{"status": "affected", "version": "various"}], "platforms": ["x86"], "packageName": "PI", "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various"}], "platforms": ["x86"], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 7035 Series Mobile Processors with Radeon\u2122 Graphics ", "versions": [{"status": "affected", "version": "various"}], "platforms": ["x86"], "defaultStatus": "unaffected"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 3000 Series Processors with Radeon\u2122 Graphics", "versions": [{"status": "affected", "version": "various"}], "platforms": ["x86"], "defaultStatus": "unaffected"}], "datePublic": "2024-02-13T17:00:00.000Z", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Improper\nAccess Control in the AMD SPI protection feature may allow a user with Ring0\n(kernel mode) privileged access to bypass protections potentially resulting in\nloss of integrity and availability.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n", "supportingMedia": [{"type": "text/html", "value": "Improper\nAccess Control in the AMD SPI protection feature may allow a user with Ring0\n(kernel mode) privileged access to bypass protections potentially resulting in\nloss of integrity and availability.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n<br>", "base64": false}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-02-13T19:32:11.904Z"}}}, "cveMetadata": {"cveId": "CVE-2023-20579", "state": "PUBLISHED", "dateUpdated": "2024-08-02T09:05:36.910Z", "dateReserved": "2022-10-27T18:53:39.757Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2024-02-13T19:32:11.904Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}