Nixpkgs security tracker

Untriaged

Permalink CVE-2023-20587

7.1 HIGH

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): NONE

created 11 months, 1 week ago

Improper Access Control in System Management Mode (SMM) may allow …

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 vendor-advisoryx_transferred

Affected products

==various
==various

AMD EPYC(TM) Embedded 7003

==various

AMD EPYC(TM) Embedded 9003

==various

AMD EPYC(TM) Embedded 3000

==various

AMD EPYC(TM) Embedded 7002

==various

Matching in nixpkgs

pkgs.spoofdpi

Simple and fast anti-censorship tool written in Go

nixos-unstable 0.12.0
- nixpkgs-unstable 0.12.0
- nixos-unstable-small 0.12.0

pkgs.perl538Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.perl540Packages.PPI

Parse, Analyze and Manipulate Perl (without perl)

nixos-unstable 1.277
- nixpkgs-unstable 1.277
- nixos-unstable-small 1.277

pkgs.haskellPackages.hsPID

PID control loop

nixos-unstable 0.1.2
- nixpkgs-unstable 0.1.2
- nixos-unstable-small 0.1.2

pkgs.spirv-llvm-translator

Tool and a library for bi-directional translation between SPIR-V and LLVM IR

nixos-unstable 18.1.0
- nixpkgs-unstable 18.1.0
- nixos-unstable-small 18.1.0

pkgs.perl538Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl540Packages.GSSAPI

Perl extension providing access to the GSSAPIv2 library

nixos-unstable 0.28
- nixpkgs-unstable 0.28
- nixos-unstable-small 0.28

pkgs.perl538Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.perl540Packages.PDFAPI2

Create, modify, and examine PDF files

nixos-unstable API2-2.045
- nixpkgs-unstable API2-2.045
- nixos-unstable-small API2-2.045

pkgs.haskellPackages.EdisonAPI

A library of efficient, purely-functional data structures (API)

nixos-unstable 1.3.3.1
- nixpkgs-unstable 1.3.3.1
- nixos-unstable-small 1.3.3.1

pkgs.perl538Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl540Packages.PPIxUtils

Utility functions for PPI

nixos-unstable 0.003
- nixpkgs-unstable 0.003
- nixos-unstable-small 0.003

pkgs.perl538Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl540Packages.PPIxRegexp

Parse regular expressions

nixos-unstable 0.088
- nixpkgs-unstable 0.088
- nixos-unstable-small 0.088

pkgs.perl538Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl540Packages.ProcPIDFile

Manage process id files

nixos-unstable 1.29
- nixpkgs-unstable 1.29
- nixos-unstable-small 1.29

pkgs.perl538Packages.WWWTwilioAPI

Accessing Twilio's REST API with Perl

nixos-unstable 0.21
- nixpkgs-unstable 0.21
- nixos-unstable-small 0.21

pkgs.perl540Packages.WWWTwilioAPI