CVE Vulnerabilities

CVE-2023-20526

Published: Nov 14, 2023 | Modified: Feb 13, 2024
CVSS 3.x
4.6
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

Affected Software

Name Vendor Start Version End Version
Epyc_7001_firmware Amd * naplespi_1.0.0.h (excluding)

References