Nixpkgs security tracker

Untriaged

Permalink CVE-2023-20579

4.4 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): NONE
Integrity impact (I): NONE
Availability impact (A): HIGH

created 1 year, 1 month ago

Improper Access Control in the AMD SPI protection feature may …

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred

Affected products

==Various
==various
==various

AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics

==various

AMD Ryzen™ 7035 Series Mobile Processors with Radeon™ Graphics

==various

AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI