PT-2023-1483 · Amd · Amd Secure Processor

CVE-2023-20523

·

Publicado

2023-01-10

·

Atualizado

2025-04-07

CVSS v3.1

5.7

Média

VetorAV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions AMD Secure Processor (ASP) (affected versions not specified)
Description The issue is related to a Time-of-Check-to-Time-of-Use (TOCTOU) vulnerability in the ASP, which may allow a physical attacker to write beyond buffer bounds. This could potentially lead to a loss of integrity or denial of service. The vulnerability is also described as a race condition error when using a shared resource, which could allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Race Condition

Time Of Check To Time Of Use

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00893
CVE-2023-20523

Produtos afetados

Amd Secure Processor