CVE-2023-20564

Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:amd:ryzen_master:*:*:*:*:*:*:*:*
cpe:2.3:a:amd:ryzen_master_monitoring_sdk:*:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:*:*

History

23 Aug 2023, 16:40

Type Values Removed Values Added
References (MISC) https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004 - (MISC) https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7004 - Vendor Advisory
CPE cpe:2.3:a:amd:ryzen_master_monitoring_sdk:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:*:*
cpe:2.3:a:amd:ryzen_master:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
First Time Microsoft
Amd ryzen Master Monitoring Sdk
Amd ryzen Master
Microsoft windows 11
Amd
Microsoft windows 10
CWE CWE-20
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.7

15 Aug 2023, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-15 22:15

Updated : 2024-02-28 20:33


NVD link : CVE-2023-20564

Mitre link : CVE-2023-20564

CVE.ORG link : CVE-2023-20564


JSON object : View

Products Affected

amd

  • ryzen_master
  • ryzen_master_monitoring_sdk

microsoft

  • windows_11
  • windows_10
CWE
CWE-20

Improper Input Validation