Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

AMD AMD EPYCâ„¢ 7003 Series Processors

CVE-2024-36357
MEDIUM 5.6

At a glance

Source
NVD
EPSS
EPSS 0.36 % · percentile 29 ()
State
PUBLISHED
Published
Updated
Assigner
AMD
NVD status
Deferred

Search on…

Description

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Weaknesses (CWE)

  • CWE-1421 — Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NAMD
CVSS 3.1MEDIUM 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:NNVD · psirt@amd.com (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
AMD · AMD EPYC™ 7003 Series Processorsunaffected MilanPI 1.0.0.G + OS Updates
AMD · AMD EPYC™ 9004 Series Processorsunaffected GenoaPI 1.0.0.E + OS Updates
AMD · AMD EPYC™ 8004 Series Processorsunaffected GenoaPI 1.0.0.E + OS Updates
AMD · AMD EPYC™ 9V64H Processorunaffected MI300PI 1.0.0.7 + OS Updates
AMD · AMD Ryzen™ 5000 Series Desktop Processorsunaffected ComboAM4v2PI 1.2.0.E + OS Updates
AMD · AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphicsunaffected ComboAM4v2PI 1.2.0.E + OS Updates
AMD · AMD Ryzen™ 7000 Series Desktop Processorsunaffected ComboAM5PI 1.2.0.3 + OS Updates ; unaffected ComboAM5PI 1.0.0.a+ OS Updates ; unaffected ComboAM5PI 1.1.0.3c+ OS Updates
AMD · AMD Ryzen™ 8000 Series Processor with Radeon™ Graphicsunaffected ComboAM5PI 1.2.0.3 + OS Updates ; unaffected ComboAM5PI 1.1.0.3c+ OS Updates
AMD · AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processorsunaffected StormPeakPI-SP6 1.1.0.0i + OS Updates ; unaffected StormPeakPI-SP6 1.0.0.1k + OS Updates
AMD · AMD Ryzen™ 6000 Series Processor with Radeon™ Graphicsunaffected RembrandtPI-FP7 1.0.0.Bb + OS Updates
AMD · AMD Ryzen™ 7035 Series Processor with Radeon™ Graphicsunaffected RembrandtPI-FP7 1.0.0.Bb + OS Updates
AMD · AMD Ryzen™ 7000 Series Processors with Radeon™ Graphicsunaffected CezannePI-FP6 1.0.1.1b + OS Updates
AMD · AMD Ryzen™ 7040 Series Processors with Radeon™ Graphicsunaffected PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
AMD · AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphicsunaffected PhoenixPI-FP8-FP7 1.2.0.0 + OS Updates
AMD · AMD Ryzen™ 7000 Series Mobile Processorsunaffected DragonRangeFL1 1.0.0.3g + OS Updates
AMD · AMD EPYC™ Embedded 7003 Series Processorsunaffected EmbMilanPI-SP3 1.0.0.A + OS updates
AMD · AMD EPYC™ Embedded 8004 Series Processorsunaffected EmbGenoaPI-SP5 1.0.0.9 + OS updates
AMD · AMD EPYC™ Embedded 9004 Series Processorsunaffected EmbGenoaPI-SP5 1.0.0.9 + OS updates
AMD · AMD Ryzen™ Embedded 5000 Series Processorsunaffected EmbAM4PI 1.0.0.7 + OS Update
AMD · AMD Ryzen™ Embedded 7000 Series Processorsunaffected EmbeddedAM5PI 1.0.0.3 + OS updates

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD