An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information

• CWE-209

  오류 메시지 정보 노출 — 예외/오류로 내부 정보가 드러남.

• xen xen
  other
• xen xen
  other
• xen xen
  other
• xen xen
  other
• debian debian_linux
  linux
• debian debian_linux
  linux
• debian debian_linux
  linux
• amd ryzen_3_3100_firmware
  other
• amd ryzen_3_3100
  other
• amd ryzen_3_3300x_firmware
  other
• amd ryzen_3_3300x
  other
• amd ryzen_5_3500_firmware
  other
• amd ryzen_5_3500
  other
• amd ryzen_5_3500x_firmware
  other
• amd ryzen_5_3500x
  other
• amd ryzen_5_3600_firmware
  other
• amd ryzen_5_3600
  other
• amd ryzen_5_3600x_firmware
  other
• amd ryzen_5_3600x
  other
• amd ryzen_5_3600xt_firmware
  other
• amd ryzen_5_3600xt
  other
• amd ryzen_7_3700x_firmware
  other
• amd ryzen_7_3700x
  other
• amd ryzen_7_3800x_firmware
  other
• amd ryzen_7_3800x
  other
• amd ryzen_7_3800xt_firmware
  other
• amd ryzen_7_3800xt
  other
• amd ryzen_9_3900_firmware
  other
• amd ryzen_9_3900
  other
• amd ryzen_9_3900x_firmware
  other
• amd ryzen_9_3900x
  other
• amd ryzen_9_3900xt_firmware
  other
• amd ryzen_9_3900xt
  other
• amd ryzen_9_3950x_firmware
  other
• amd ryzen_9_3950x
  other
• amd ryzen_9_pro_3900_firmware
  other
• amd ryzen_9_pro_3900
  other
• amd ryzen_threadripper_pro_3995wx_firmware
  other
• amd ryzen_threadripper_pro_3995wx
  other
• amd ryzen_threadripper_pro_3975wx_firmware
  other
• amd ryzen_threadripper_pro_3975wx
  other
• amd ryzen_threadripper_pro_3955wx_firmware
  other
• amd ryzen_threadripper_pro_3955wx
  other
• amd ryzen_threadripper_pro_3945wx_firmware
  other
• amd ryzen_threadripper_pro_3945wx
  other
• amd ryzen_threadripper_3990x_firmware
  other
• amd ryzen_threadripper_3990x
  other
• amd ryzen_threadripper_3970x_firmware
  other
• amd ryzen_threadripper_3970x
  other
• amd ryzen_threadripper_3960x_firmware
  other
• amd ryzen_threadripper_3960x
  other
• amd ryzen_7_4700g_firmware
  other
• amd ryzen_7_4700g
  other
• amd ryzen_7_4700ge_firmware
  other
• amd ryzen_7_4700ge
  other
• amd ryzen_5_4600g_firmware
  other
• amd ryzen_5_4600g
  other
• amd ryzen_5_4600ge_firmware
  other
• amd ryzen_5_4600ge
  other
• amd ryzen_3_4300g_firmware
  other
• amd ryzen_3_4300g
  other
• amd ryzen_3_4300ge_firmware
  other
• amd ryzen_3_4300ge
  other
• amd ryzen_3_pro_4450u_firmware
  other
• amd ryzen_3_pro_4450u
  other
• amd ryzen_3_pro_4350ge_firmware
  other
• amd ryzen_3_pro_4350ge
  other
• amd ryzen_3_pro_4350g_firmware
  other
• amd ryzen_3_pro_4350g
  other
• amd ryzen_3_pro_4200g_firmware
  other
• amd ryzen_3_pro_4200g
  other
• amd ryzen_5_pro_4650ge_firmware
  other
• amd ryzen_5_pro_4650ge
  other
• amd ryzen_5_pro_4650g_firmware
  other
• amd ryzen_5_pro_4650g
  other
• amd ryzen_5_pro_4400g_firmware
  other
• amd ryzen_5_pro_4400g
  other
• amd ryzen_7_pro_4750u_firmware
  other
• amd ryzen_7_pro_4750u
  other
• amd ryzen_7_pro_4750ge_firmware
  other
• amd ryzen_7_pro_4750ge
  other
• amd ryzen_7_pro_4750g_firmware
  other
• amd ryzen_7_pro_4750g
  other
• amd ryzen_7_5700u_firmware
  other
• amd ryzen_7_5700u
  other
• amd ryzen_5_5500u_firmware
  other
• amd ryzen_5_5500u
  other
• amd ryzen_3_5300u_firmware
  other
• amd ryzen_3_5300u
  other
• amd ryzen_5_7520u_firmware
  other
• amd ryzen_5_7520u
  other
• amd ryzen_3_7320u_firmware
  other
• amd ryzen_3_7320u
  other
• amd athlon_gold_7220u_firmware
  other
• amd athlon_gold_7220u
  other
• amd epyc_7232p_firmware
  other
• amd epyc_7232p
  other
• amd epyc_7302p_firmware
  other
• amd epyc_7302p
  other
• amd epyc_7402p_firmware
  other
• amd epyc_7402p
  other
• amd epyc_7502p_firmware
  other
• amd epyc_7502p
  other
• amd epyc_7702p_firmware
  other
• amd epyc_7702p
  other
• amd epyc_7252_firmware
  other
• amd epyc_7252
  other
• amd epyc_7262_firmware
  other
• amd epyc_7262
  other
• amd epyc_7272_firmware
  other
• amd epyc_7272
  other
• amd epyc_7282_firmware
  other
• amd epyc_7282
  other
• amd epyc_7302_firmware
  other
• amd epyc_7302
  other
• amd epyc_7352_firmware
  other
• amd epyc_7352
  other
• amd epyc_7402_firmware
  other
• amd epyc_7402
  other
• amd epyc_7452_firmware
  other
• amd epyc_7452
  other
• amd epyc_7502_firmware
  other
• amd epyc_7502
  other
• amd epyc_7532_firmware
  other
• amd epyc_7532
  other
• amd epyc_7542_firmware
  other
• amd epyc_7542
  other
• amd epyc_7552_firmware
  other
• amd epyc_7552
  other
• amd epyc_7642_firmware
  other
• amd epyc_7642
  other
• amd epyc_7662_firmware
  other
• amd epyc_7662
  other
• amd epyc_7702_firmware
  other
• amd epyc_7702
  other
• amd epyc_7742_firmware
  other
• amd epyc_7742
  other
• amd epyc_7h12_firmware
  other
• amd epyc_7h12
  other
• amd epyc_7f32_firmware
  other
• amd epyc_7f32
  other
• amd epyc_7f52_firmware
  other
• amd epyc_7f52
  other
• amd epyc_7f72_firmware
  other
• amd epyc_7f72
  other

• xen xen 4.14.0cpe:2.3:o:xen:xen:4.14.0:*:*:*:*:*:x86:*
• xen xen 4.15.0cpe:2.3:o:xen:xen:4.15.0:*:*:*:*:*:x86:*
• xen xen 4.16.0cpe:2.3:o:xen:xen:4.16.0:*:*:*:*:*:x86:*
• xen xen 4.17.0cpe:2.3:o:xen:xen:4.17.0:*:*:*:*:*:x86:*
• debian debian_linux 10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
• debian debian_linux 11.0cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
• debian debian_linux 12.0cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
• amd ryzen_3_3100_firmwarecpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
• amd ryzen_3_3100cpe:2.3:h:amd:ryzen_3_3100:-:*:*:*:*:*:*:*
• amd ryzen_3_3300x_firmwarecpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_3_3300xcpe:2.3:h:amd:ryzen_3_3300x:-:*:*:*:*:*:*:*
• amd ryzen_5_3500_firmwarecpe:2.3:o:amd:ryzen_5_3500_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_3500cpe:2.3:h:amd:ryzen_5_3500:-:*:*:*:*:*:*:*
• amd ryzen_5_3500x_firmwarecpe:2.3:o:amd:ryzen_5_3500x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_3500xcpe:2.3:h:amd:ryzen_5_3500x:-:*:*:*:*:*:*:*
• amd ryzen_5_3600_firmwarecpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_3600cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:*
• amd ryzen_5_3600x_firmwarecpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_3600xcpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:*
• amd ryzen_5_3600xt_firmwarecpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_3600xtcpe:2.3:h:amd:ryzen_5_3600xt:-:*:*:*:*:*:*:*
• amd ryzen_7_3700x_firmwarecpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_7_3700xcpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:*
• amd ryzen_7_3800x_firmwarecpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_7_3800xcpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:*
• amd ryzen_7_3800xt_firmwarecpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:*:*:*:*:*:*:*
• amd ryzen_7_3800xtcpe:2.3:h:amd:ryzen_7_3800xt:-:*:*:*:*:*:*:*
• amd ryzen_9_3900_firmwarecpe:2.3:o:amd:ryzen_9_3900_firmware:-:*:*:*:*:*:*:*
• amd ryzen_9_3900cpe:2.3:h:amd:ryzen_9_3900:-:*:*:*:*:*:*:*
• amd ryzen_9_3900x_firmwarecpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_9_3900xcpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:*
• amd ryzen_9_3900xt_firmwarecpe:2.3:o:amd:ryzen_9_3900xt_firmware:-:*:*:*:*:*:*:*
• amd ryzen_9_3900xtcpe:2.3:h:amd:ryzen_9_3900xt:-:*:*:*:*:*:*:*
• amd ryzen_9_3950x_firmwarecpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_9_3950xcpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:*
• amd ryzen_9_pro_3900_firmwarecpe:2.3:o:amd:ryzen_9_pro_3900_firmware:-:*:*:*:*:*:*:*
• amd ryzen_9_pro_3900cpe:2.3:h:amd:ryzen_9_pro_3900:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3995wx_firmwarecpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3995wxcpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3975wx_firmwarecpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3975wxcpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3955wx_firmwarecpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3955wxcpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3945wx_firmwarecpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_pro_3945wxcpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_3990x_firmwarecpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_3990xcpe:2.3:h:amd:ryzen_threadripper_3990x:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_3970x_firmwarecpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_3970xcpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_3960x_firmwarecpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*
• amd ryzen_threadripper_3960xcpe:2.3:h:amd:ryzen_threadripper_3960x:-:*:*:*:*:*:*:*
• amd ryzen_7_4700g_firmwarecpe:2.3:o:amd:ryzen_7_4700g_firmware:-:*:*:*:*:*:*:*
• amd ryzen_7_4700gcpe:2.3:h:amd:ryzen_7_4700g:-:*:*:*:*:*:*:*
• amd ryzen_7_4700ge_firmwarecpe:2.3:o:amd:ryzen_7_4700ge_firmware:-:*:*:*:*:*:*:*
• amd ryzen_7_4700gecpe:2.3:h:amd:ryzen_7_4700ge:-:*:*:*:*:*:*:*
• amd ryzen_5_4600g_firmwarecpe:2.3:o:amd:ryzen_5_4600g_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_4600gcpe:2.3:h:amd:ryzen_5_4600g:-:*:*:*:*:*:*:*
• amd ryzen_5_4600ge_firmwarecpe:2.3:o:amd:ryzen_5_4600ge_firmware:-:*:*:*:*:*:*:*
• amd ryzen_5_4600gecpe:2.3:h:amd:ryzen_5_4600ge:-:*:*:*:*:*:*:*
• amd ryzen_3_4300g_firmwarecpe:2.3:o:amd:ryzen_3_4300g_firmware:-:*:*:*:*:*:*:*

• http://seclists.org/fulldisclosure/2023/Jul/43

  Not Applicable
• http://www.openwall.com/lists/oss-security/2023/07/24/3

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/1

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/12

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/13

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/14

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/15

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/16

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/17

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/5

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/25/6

  Mailing List
• http://www.openwall.com/lists/oss-security/2023/07/26/1

  Mailing ListMitigationPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2023/07/31/2

  Mailing ListMitigationPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2023/08/08/6
• http://www.openwall.com/lists/oss-security/2023/08/08/7
• http://www.openwall.com/lists/oss-security/2023/08/08/8
• http://www.openwall.com/lists/oss-security/2023/08/16/4
• http://www.openwall.com/lists/oss-security/2023/08/16/5
• http://www.openwall.com/lists/oss-security/2023/09/22/11
• http://www.openwall.com/lists/oss-security/2023/09/22/9
• http://www.openwall.com/lists/oss-security/2023/09/25/4
• http://www.openwall.com/lists/oss-security/2023/09/25/7
• http://xenbits.xen.org/xsa/advisory-433.html

  MitigationPatchVendor Advisory
• https://cmpxchg8b.com/zenbleed.html

  Exploit
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html

  Mailing List
• https://lists.debian.org/debian-lts-announce/2023/07/msg00033.html

  Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/08/msg00001.html
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CP6WQO3CDPLE5O635N7TAL5KCZ6HZ4FE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKKYIK2EASDNUV4I7EFJKNBVO3KCKGRR/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SD2G74BXS2SWOE3FIQJ6X76S3A7PDGML/
• https://security.netapp.com/advisory/ntap-20240531-0004/
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7008

  Vendor Advisory
• https://www.debian.org/security/2023/dsa-5459

  Third Party Advisory
• https://www.debian.org/security/2023/dsa-5461

  Third Party Advisory
• https://www.debian.org/security/2023/dsa-5462

  Third Party Advisory

링크 내용 불러오는 중…