7.5

CVE-2020-12965

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amd ≫ Ryzen Pro 5650g Firmware Version -
   Amd ≫ Ryzen Pro 5650g Version -
Amd ≫ Ryzen Pro 5650ge Firmware Version -
   Amd ≫ Ryzen Pro 5650ge Version -
Amd ≫ Ryzen Pro 5750g Firmware Version -
   Amd ≫ Ryzen Pro 5750g Version -
Amd ≫ Ryzen Pro 5750ge Firmware Version -
   Amd ≫ Ryzen Pro 5750ge Version -
Amd ≫ Ryzen Pro 5350g Firmware Version -
   Amd ≫ Ryzen Pro 5350g Version -
Amd ≫ Ryzen Pro 5350ge Firmware Version -
   Amd ≫ Ryzen Pro 5350ge Version -
Amd ≫ Ryzen Pro 4750g Firmware Version -
   Amd ≫ Ryzen Pro 4750g Version -
Amd ≫ Ryzen Pro 4750ge Firmware Version -
   Amd ≫ Ryzen Pro 4750ge Version -
Amd ≫ Ryzen Pro 4650g Firmware Version -
   Amd ≫ Ryzen Pro 4650g Version -
Amd ≫ Ryzen Pro 4650ge Firmware Version -
   Amd ≫ Ryzen Pro 4650ge Version -
Amd ≫ Ryzen Pro 4350g Firmware Version -
   Amd ≫ Ryzen Pro 4350g Version -
Amd ≫ Ryzen Pro 4350ge Firmware Version -
   Amd ≫ Ryzen Pro 4350ge Version -
Amd ≫ Ryzen Pro 3900 Firmware Version -
   Amd ≫ Ryzen Pro 3900 Version -
Amd ≫ Ryzen Pro 3700 Firmware Version -
   Amd ≫ Ryzen Pro 3700 Version -
Amd ≫ Ryzen Pro 3600 Firmware Version -
   Amd ≫ Ryzen Pro 3600 Version -
Amd ≫ Ryzen Pro 3400g Firmware Version -
   Amd ≫ Ryzen Pro 3400g Version -
Amd ≫ Ryzen Pro 3400ge Firmware Version -
   Amd ≫ Ryzen Pro 3400ge Version -
Amd ≫ Ryzen Pro 3350g Firmware Version -
   Amd ≫ Ryzen Pro 3350g Version -
Amd ≫ Ryzen Pro 3200g Firmware Version -
   Amd ≫ Ryzen Pro 3200g Version -
Amd ≫ Ryzen Pro 3200ge Firmware Version -
   Amd ≫ Ryzen Pro 3200ge Version -
Amd ≫ Ryzen Pro 2400g Firmware Version -
   Amd ≫ Ryzen Pro 2400g Version -
Amd ≫ Ryzen Pro 2400ge Firmware Version -
   Amd ≫ Ryzen Pro 2400ge Version -
Amd ≫ Ryzen Pro 2200g Firmware Version -
   Amd ≫ Ryzen Pro 2200g Version -
Amd ≫ Ryzen Pro 2200ge Firmware Version -
   Amd ≫ Ryzen Pro 2200ge Version -
Amd ≫ Athlon Gold Pro 3150g Firmware Version -
   Amd ≫ Athlon Gold Pro 3150g Version -
Amd ≫ Athlon Pro 300ge Firmware Version -
   Amd ≫ Athlon Pro 300ge Version -
Amd ≫ Athlon Pro 200ge Firmware Version -
   Amd ≫ Athlon Pro 200ge Version -
Amd ≫ Ryzen 5950x Firmware Version -
   Amd ≫ Ryzen 5950x Version -
Amd ≫ Ryzen 5800x3d Firmware Version -
   Amd ≫ Ryzen 5800x3d Version -
Amd ≫ Ryzen 5900x Firmware Version -
   Amd ≫ Ryzen 5900x Version -
Amd ≫ Ryzen 5800x Firmware Version -
   Amd ≫ Ryzen 5800x Version -
Amd ≫ Ryzen 5600x Firmware Version -
   Amd ≫ Ryzen 5600x Version -
Amd ≫ Ryzen 5700g Firmware Version -
   Amd ≫ Ryzen 5700g Version -
Amd ≫ Ryzen 5600g Firmware Version -
   Amd ≫ Ryzen 5600g Version -
Amd ≫ Ryzen 5700g Firmware Version -
   Amd ≫ Ryzen 5700g Version -
Amd ≫ Ryzen 5700ge Firmware Version -
   Amd ≫ Ryzen 5700ge Version -
Amd ≫ Ryzen 5600g Firmware Version -
   Amd ≫ Ryzen 5600g Version -
Amd ≫ Ryzen 5600ge Firmware Version -
   Amd ≫ Ryzen 5600ge Version -
Amd ≫ Ryzen 5300g Firmware Version -
   Amd ≫ Ryzen 5300g Version -
Amd ≫ Ryzen 5300ge Firmware Version -
   Amd ≫ Ryzen 5300ge Version -
Amd ≫ Ryzen 4700g Firmware Version -
   Amd ≫ Ryzen 4700g Version -
Amd ≫ Ryzen 4600g Firmware Version -
   Amd ≫ Ryzen 4600g Version -
Amd ≫ Ryzen 4300g Firmware Version -
   Amd ≫ Ryzen 4300g Version -
Amd ≫ Ryzen 4700ge Firmware Version -
   Amd ≫ Ryzen 4700ge Version -
Amd ≫ Ryzen 4600ge Firmware Version -
   Amd ≫ Ryzen 4600ge Version -
Amd ≫ Ryzen 4300ge Firmware Version -
   Amd ≫ Ryzen 4300ge Version -
Amd ≫ Athlon 3150ge Firmware Version -
   Amd ≫ Athlon 3150ge Version -
Amd ≫ Athlon 3150g Firmware Version -
   Amd ≫ Athlon 3150g Version -
Amd ≫ Athlon 3050ge Firmware Version -
   Amd ≫ Athlon 3050ge Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.42% 0.825
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

http://www.openwall.com/lists/oss-security/2023/12/05/3
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1010
Vendor Advisory
Mitigation