Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2023-20577
7.4 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 2 weeks ago Activity log
  • Created & dismissed (no matching packages found) suggestion 2 weeks ago
A heap overflow in SMM module may allow an attacker …

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.

Affected products

AMD Instinct™ MI300A
  • ==MI300 SR5 PI 1.0.0.1
AMD EPYC™ Embedded 3000
  • ==Snowyowl PI 1.1.0.B
AMD EPYC™ Embedded 7002
  • ==EmbRomePI-SP3 1.0.0.B
AMD EPYC™ Embedded 7003
  • ==EmbMilanPI-SP3 1.0.0.8
AMD EPYC™ Embedded 9003
  • ==EmbGenoaPI-SP5 1.0.0.3
AMD Ryzen™ Embedded 5000
  • ==EmbAM4PI 1.0.0.4
AMD Ryzen™ Embedded R1000
  • ==EmbeddedPI-FP5 1.2.0.A
AMD Ryzen™ Embedded R2000
  • ==EmbeddedPI-FP5 1.0.0.2
AMD Ryzen™ Embedded V1000
  • ==EmbeddedPI-FP5 1.2.0.A
AMD Ryzen™ Embedded V2000
  • ==EmbeddedPI-FP6 1.0.0.9
AMD Ryzen™ Embedded V3000
  • ==EmbeddedPI-FP7r2 1.0.0.8
2nd Gen AMD EPYC™ Processors
  • ==RomePI 1.0.0.H
3rd Gen AMD EPYC™ Processors
  • ==MilanPI 1.0.0.C
4th Gen AMD EPYC™ Processors
  • ==GenoaPI 1.0.0.8
AMD Ryzen™ 7000 Series Processors
  • ==ComboAM5 1.0.0.7b
AMD Ryzen™ 7045 Series Mobile Processors
  • ==DragonRangeFL1PI 1.0.0.3a
AMD Ryzen™ 3000 Series Desktop Processors
  • ==ComboAM4 1.0.0.B
  • ==ComboAM4v2 1.2.0.B
AMD Ryzen™ 5000 Series Desktop Processors
  • ==ComboAM4v2 1.2.0.B
AMD Ryzen™ Threadripper™ PRO 5000WX Processors
  • ==ChagallWSPI-sWRX8 1.0.0.7
AMD Ryzen™ Threadripper™ 3000 Series Processors
  • ==CastlePeakPI-SP3r3 1.0.0.A
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
  • ==CastlePeakWSPI-sWRX8 1.0.0.C
  • ==ChagallWSPI-sWRX8 1.0.0.7
AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
  • ==CezannePI-FP6 1.0.0.F
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
  • ==CezannePI-FP6 1.0.0.F
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
  • ==RembrandtPI-FP7 1.0.0.9b
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  • ==MendocinoPI-FT6 1.0.0.6
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
  • ==RembrandtPI-FP7 1.0.0.9b
AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
  • ==PhoenixPI-FP8-FP7 1.0.0.2
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
  • ==PicassoPI-FP5 1.0.1.0
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
  • ==RenoirPI-FP6 1.0.0.D
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
  • ==CezannePI-FP6 1.0.0.F
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  • ==PicassoPI-FP5 1.0.1.0
  • ==PollockPI-FT5 1.0.0.6
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
  • ==ComboAM4v2 1.2.0.B
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
  • ==ComboAM4v2 1.2.0.B
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
  • ==ComboAM4 1.0.0.B
  • ==ComboAM4v2 1.2.0.B