What’s Vulnerable › Vulnerabilities

CVE-2023-20588: Speculative Leaks

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-08 · updated 2026-06-17
• Weakness: CWE-369

Description

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

Affected products

• AMD Athlon Gold 3150G Firmware: all versions
• AMD Athlon Gold 3150Ge Firmware: all versions
• AMD Athlon Gold Pro 3150G Firmware: all versions
• AMD Athlon Gold Pro 3150Ge Firmware: all versions
• AMD Athlon Pro 300Ge Firmware: all versions
• AMD Athlon Silver 3050Ge Firmware: all versions
• AMD Athlon Silver Pro 3125Ge Firmware: all versions
• AMD Epyc 7251 Firmware: all versions
• AMD Epyc 7261 Firmware: all versions
• AMD Epyc 7281 Firmware: all versions
• AMD Epyc 7301 Firmware: all versions
• AMD Epyc 7351 Firmware: all versions
• AMD Epyc 7351P Firmware: all versions
• AMD Epyc 7371 Firmware: all versions
• AMD Epyc 7401 Firmware: all versions
• AMD Epyc 7401P Firmware: all versions
• AMD Epyc 7451 Firmware: all versions
• AMD Epyc 7501 Firmware: all versions
• AMD Epyc 7551 Firmware: all versions
• AMD Epyc 7551P Firmware: all versions
• AMD Epyc 7571 Firmware: all versions
• AMD Epyc 7601 Firmware: all versions
• AMD Ryzen 3 3200G Firmware: all versions
• AMD Ryzen 3 3200Ge Firmware: all versions
• AMD Ryzen 3 Pro 3200G Firmware: all versions
• AMD Ryzen 3 Pro 3200Ge Firmware: all versions
• AMD Ryzen 5 3400G Firmware: all versions
• AMD Ryzen 5 Pro 3350G Firmware: all versions
• AMD Ryzen 5 Pro 3350Ge Firmware: all versions
• AMD Ryzen 5 Pro 3400G Firmware: all versions

How to fix

Upgrade to a fixed version: Microsoft Windows 10 Version 1507 10.0.10240.20345; Microsoft Windows 10 1607 10.0.14393.6529; Microsoft Windows 10 10.0.17763.5206; Microsoft Windows 10 10.0.19044.3803; Microsoft Windows 10 10.0.19045.3803; Microsoft Windows 11 21H2 10.0.22000.2652; Microsoft Windows 11 10.0.22621.2861; Microsoft Windows 11 10.0.22631.2861; Microsoft Windows Server 2016 10.0.14393.6529; Microsoft Windows Server 2019 10.0.17763.5206; Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.584. Check the vendor advisory for mitigations.

References

• http://www.openwall.com/lists/oss-security/2023/09/25/3
• http://www.openwall.com/lists/oss-security/2023/09/25/4
• http://www.openwall.com/lists/oss-security/2023/09/25/5
• http://www.openwall.com/lists/oss-security/2023/09/25/7
• http://www.openwall.com/lists/oss-security/2023/09/25/8
• http://www.openwall.com/lists/oss-security/2023/09/26/5
• http://www.openwall.com/lists/oss-security/2023/09/26/8
• http://www.openwall.com/lists/oss-security/2023/09/26/9
• http://www.openwall.com/lists/oss-security/2023/09/27/1
• http://www.openwall.com/lists/oss-security/2023/10/03/12
• http://www.openwall.com/lists/oss-security/2023/10/03/13
• http://www.openwall.com/lists/oss-security/2023/10/03/14

Get alerted when CVE-2023-20588 or the next vulnerability affects your stack