DEBIAN-CVE-2023-20569

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2023-20569

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-20569

Upstream

CVE-2023-20569

Published

2023-08-08T18:15:11.530Z

Modified

2025-11-17T04:24:01.841769Z

Severity

4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

References

https://security-tracker.debian.org/tracker/CVE-2023-20569

Affected packages

Debian:11

amd64-microcode

Package

Name: amd64-microcode
Purl: pkg:deb/debian/amd64-microcode?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20230719.1~deb11u1

Affected versions

0.*

0.20120117-1

1.*

1.20120117-1

1.20120117-2~bpo60+1

1.20120117-2

1.20120910-1~bpo60+1

1.20120910-1

1.20120910-2~bpo60+1

1.20120910-2

1.20120910-3

1.20141028.1

1.20160316.1

2.*

2.20120910-1~bpo70+1

2.20120910-1

2.20131007.1

2.20131007.1+really20130710.1

2.20141028.1~bpo70+1

2.20141028.1

2.20160316.1~bpo70+1

2.20160316.1~deb8u1

2.20160316.1

3.*

3.20160316.1

3.20160316.2

3.20160316.3

3.20171205.1

3.20171205.2

3.20180515.1

3.20180524.1~bpo9+1

3.20180524.1

3.20181128.1~bpo9+1

3.20181128.1~deb8u1

3.20181128.1~deb9u1

3.20181128.1~deb9u2

3.20181128.1

3.20191021.1

3.20191218.1

3.20220411.1

3.20220411.2

3.20230414.1

3.20230719.1~deb10u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.10.179-5

Affected versions

5.*

5.10.46-4

5.10.46-5

5.10.70-1~bpo10+1

5.10.70-1

5.10.84-1

5.10.92-1~bpo10+1

5.10.92-1

5.10.92-2

5.10.103-1~bpo10+1

5.10.103-1

5.10.106-1

5.10.113-1

5.10.120-1~bpo10+1

5.10.120-1

5.10.127-1

5.10.127-2~bpo10+1

5.10.127-2

5.10.136-1

5.10.140-1

5.10.148-1

5.10.149-1

5.10.149-2

5.10.158-1

5.10.158-2

5.10.162-1

5.10.178-1

5.10.178-2

5.10.178-3

5.10.179-1

5.10.179-2

5.10.179-3

5.10.179-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

Debian:12

amd64-microcode

Package

Name: amd64-microcode
Purl: pkg:deb/debian/amd64-microcode?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20230719.1~deb12u1

Affected versions

0.*

0.20120117-1

1.*

1.20120117-1

1.20120117-2~bpo60+1

1.20120117-2

1.20120910-1~bpo60+1

1.20120910-1

1.20120910-2~bpo60+1

1.20120910-2

1.20120910-3

1.20141028.1

1.20160316.1

2.*

2.20120910-1~bpo70+1

2.20120910-1

2.20131007.1

2.20131007.1+really20130710.1

2.20141028.1~bpo70+1

2.20141028.1

2.20160316.1~bpo70+1

2.20160316.1~deb8u1

2.20160316.1

3.*

3.20160316.1

3.20160316.2

3.20160316.3

3.20171205.1

3.20171205.2

3.20180515.1

3.20180524.1~bpo9+1

3.20180524.1

3.20181128.1~bpo9+1

3.20181128.1~deb8u1

3.20181128.1~deb9u1

3.20181128.1~deb9u2

3.20181128.1

3.20191021.1

3.20191218.1

3.20220411.1

3.20220411.2

3.20230414.1

3.20230719.1~deb10u1

3.20230719.1~deb11u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.1.38-4

Affected versions

6.*

6.1.27-1

6.1.37-1

6.1.38-1

6.1.38-2~bpo11+1

6.1.38-2

6.1.38-3

6.1.38-4~bpo11+1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

Debian:13

amd64-microcode

Package

Name: amd64-microcode
Purl: pkg:deb/debian/amd64-microcode?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20230719.1

Affected versions

0.*

0.20120117-1

1.*

1.20120117-1

1.20120117-2~bpo60+1

1.20120117-2

1.20120910-1~bpo60+1

1.20120910-1

1.20120910-2~bpo60+1

1.20120910-2

1.20120910-3

1.20141028.1

1.20160316.1

2.*

2.20120910-1~bpo70+1

2.20120910-1

2.20131007.1

2.20131007.1+really20130710.1

2.20141028.1~bpo70+1

2.20141028.1

2.20160316.1~bpo70+1

2.20160316.1~deb8u1

2.20160316.1

3.*

3.20160316.1

3.20160316.2

3.20160316.3

3.20171205.1

3.20171205.2

3.20180515.1

3.20180524.1~bpo9+1

3.20180524.1

3.20181128.1~bpo9+1

3.20181128.1~deb8u1

3.20181128.1~deb9u1

3.20181128.1~deb9u2

3.20181128.1

3.20191021.1

3.20191218.1

3.20220411.1

3.20220411.2

3.20230414.1

3.20230719.1~deb10u1

3.20230719.1~deb11u1

3.20230719.1~deb12u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.4.4-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

Debian:14

amd64-microcode

Package

Name: amd64-microcode
Purl: pkg:deb/debian/amd64-microcode?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20230719.1

Affected versions

0.*

0.20120117-1

1.*

1.20120117-1

1.20120117-2~bpo60+1

1.20120117-2

1.20120910-1~bpo60+1

1.20120910-1

1.20120910-2~bpo60+1

1.20120910-2

1.20120910-3

1.20141028.1

1.20160316.1

2.*

2.20120910-1~bpo70+1

2.20120910-1

2.20131007.1

2.20131007.1+really20130710.1

2.20141028.1~bpo70+1

2.20141028.1

2.20160316.1~bpo70+1

2.20160316.1~deb8u1

2.20160316.1

3.*

3.20160316.1

3.20160316.2

3.20160316.3

3.20171205.1

3.20171205.2

3.20180515.1

3.20180524.1~bpo9+1

3.20180524.1

3.20181128.1~bpo9+1

3.20181128.1~deb8u1

3.20181128.1~deb9u1

3.20181128.1~deb9u2

3.20181128.1

3.20191021.1

3.20191218.1

3.20220411.1

3.20220411.2

3.20230414.1

3.20230719.1~deb10u1

3.20230719.1~deb11u1

3.20230719.1~deb12u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"

linux

Package

Name: linux
Purl: pkg:deb/debian/linux?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.4.4-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-20569.json"