CVE-2023-20530: Input Validation
Published Jan 10, 2023
·Updated
Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service.
Affected Software
96 affected components
AMD Epyc 7003 Firmware<milanpi_1.0.0.5
AMD Epyc 7003
AMD Epyc 72f3 Firmware<milanpi_1.0.0.5
AMD Epyc 72f3
AMD Epyc 7313 Firmware<milanpi_1.0.0.5
AMD Epyc 7313
AMD Epyc 7313p Firmware<milanpi_1.0.0.5
AMD Epyc 7313p
AMD Epyc 7343 Firmware<milanpi_1.0.0.5
AMD Epyc 7343
AMD Epyc 7373x Firmware<milanpi_1.0.0.5
AMD Epyc 7373x
AMD Epyc 73f3 Firmware<milanpi_1.0.0.5
AMD Epyc 73f3
AMD Epyc 7413 Firmware<milanpi_1.0.0.5
AMD Epyc 7413
AMD Epyc 7443 Firmware<milanpi_1.0.0.5
AMD Epyc 7443
AMD Epyc 7443p Firmware<milanpi_1.0.0.5
AMD Epyc 7443p
AMD Epyc 7453 Firmware<milanpi_1.0.0.5
AMD Epyc 7453
AMD Epyc 74f3 Firmware<milanpi_1.0.0.5
AMD Epyc 74f3
AMD Epyc 7513 Firmware<milanpi_1.0.0.5
AMD Epyc 7513
AMD Epyc 7543 Firmware<milanpi_1.0.0.5
AMD Epyc 7543
AMD Epyc 7543p Firmware<milanpi_1.0.0.5
AMD Epyc 7543p
AMD Epyc 7573x Firmware<milanpi_1.0.0.5
AMD Epyc 7573x
AMD Epyc 75f3 Firmware<milanpi_1.0.0.5
AMD Epyc 75f3
AMD Epyc 7643 Firmware<milanpi_1.0.0.5
AMD Epyc 7643
AMD Epyc 7663 Firmware<milanpi_1.0.0.5
AMD Epyc 7663
AMD Epyc 7713 Firmware<milanpi_1.0.0.5
AMD Epyc 7713
AMD Epyc 7713p Firmware<milanpi_1.0.0.5
AMD Epyc 7713p
AMD Epyc 7743 Firmware<milanpi_1.0.0.5
AMD Epyc 7743
AMD Epyc 7763 Firmware<milanpi_1.0.0.5
AMD Epyc 7763
AMD Epyc 7773x Firmware<milanpi_1.0.0.5
AMD Epyc 7773x
All of the following
AMD Epyc 7003 Firmware<milanpi_1.0.0.5
AMD Epyc 7003
All of the following
AMD Epyc 72f3 Firmware<milanpi_1.0.0.5
AMD Epyc 72f3
All of the following
AMD Epyc 7313 Firmware<milanpi_1.0.0.5
AMD Epyc 7313
All of the following
AMD Epyc 7313p Firmware<milanpi_1.0.0.5
AMD Epyc 7313p
All of the following
AMD Epyc 7343 Firmware<milanpi_1.0.0.5
AMD Epyc 7343
All of the following
AMD Epyc 7373x Firmware<milanpi_1.0.0.5
AMD Epyc 7373x
All of the following
AMD Epyc 73f3 Firmware<milanpi_1.0.0.5
AMD Epyc 73f3
All of the following
AMD Epyc 7413 Firmware<milanpi_1.0.0.5
AMD Epyc 7413
All of the following
AMD Epyc 7443 Firmware<milanpi_1.0.0.5
AMD Epyc 7443
All of the following
AMD Epyc 7443p Firmware<milanpi_1.0.0.5
AMD Epyc 7443p
All of the following
AMD Epyc 7453 Firmware<milanpi_1.0.0.5
AMD Epyc 7453
All of the following
AMD Epyc 74f3 Firmware<milanpi_1.0.0.5
AMD Epyc 74f3
All of the following
AMD Epyc 7513 Firmware<milanpi_1.0.0.5
AMD Epyc 7513
All of the following
AMD Epyc 7543 Firmware<milanpi_1.0.0.5
AMD Epyc 7543
All of the following
AMD Epyc 7543p Firmware<milanpi_1.0.0.5
AMD Epyc 7543p
All of the following
AMD Epyc 7573x Firmware<milanpi_1.0.0.5
AMD Epyc 7573x
All of the following
AMD Epyc 75f3 Firmware<milanpi_1.0.0.5
AMD Epyc 75f3
All of the following
AMD Epyc 7643 Firmware<milanpi_1.0.0.5
AMD Epyc 7643
All of the following
AMD Epyc 7663 Firmware<milanpi_1.0.0.5
AMD Epyc 7663
All of the following
AMD Epyc 7713 Firmware<milanpi_1.0.0.5
AMD Epyc 7713
All of the following
AMD Epyc 7713p Firmware<milanpi_1.0.0.5
AMD Epyc 7713p
All of the following
AMD Epyc 7743 Firmware<milanpi_1.0.0.5
AMD Epyc 7743
All of the following
AMD Epyc 7763 Firmware<milanpi_1.0.0.5
AMD Epyc 7763
All of the following
AMD Epyc 7773x Firmware<milanpi_1.0.0.5
AMD Epyc 7773x
Event History
Jan 10, 2023
CVE Published
via MITRE·08:57 PM
Data Sourced
via MITRE·08:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-20530?
The severity of CVE-2023-20530 is high (7.5).
2
How does CVE-2023-20530 impact AMD Epyc 7003 firmware?
CVE-2023-20530 affects AMD Epyc 7003 firmware version milanpi_1.0.0.5 and may result in out-of-bounds memory reads potentially causing a denial of service.
3
Is AMD Epyc 7003 vulnerable to CVE-2023-20530?
Yes, AMD Epyc 7003 firmware version milanpi_1.0.0.5 is vulnerable to CVE-2023-20530.
4
How can I fix CVE-2023-20530?
To fix CVE-2023-20530, apply the latest firmware update provided by AMD for the affected systems.
5
Where can I find more information about CVE-2023-20530?
You can find more information about CVE-2023-20530 on the AMD product security bulletin at the following link: [AMD Product Security Bulletin](https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032).