Which versions of AMD ?Prof are affected by CVE-2023-20561?

Versions up to and including 4.1.396 and versions up to exclusive 4.1-424 of AMD ?Prof are affected by CVE-2023-20561.

What is IOCTL (Input Output Control)?

IOCTL (Input Output Control) is a system call used to communicate with drivers and control devices in a computer system.

Is Microsoft Windows affected by CVE-2023-20561?

No, Microsoft Windows is not affected by CVE-2023-20561.

Is Linux Kernel affected by CVE-2023-20561?

No, Linux Kernel is not affected by CVE-2023-20561.

What is the severity of CVE-2023-20561?

CVE-2023-20561 has a severity rating of medium with a value of 5.5.

Where can I find more information about CVE-2023-20561?

You can find more information about CVE-2023-20561 on the AMD product security bulletin.

Vulnerability/
CVE-2023-20561

medium

5.5

8/8/2023

10/10/2024

CVE-2023-20561:

Q: What is CVE-2023-20561?

CVE-2023-20561 is a vulnerability in AMD ?Prof that allows an authenticated user to send an arbitrary address, potentially causing a Windows crash leading to denial of service.

First published: Tue Aug 08 2023(Updated: )

Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD ?Prof may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.

Credit: psirt@amd.com psirt@amd.com

Affected Software	Affected Version	How to fix
Amd Amd Uprof	<4.1.396
Microsoft Windows
Amd Amd Uprof	<4.1-424
Linux Linux kernel

Remedy

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003

Never miss a vulnerability like this again

Reference Links

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003

Frequently Asked Questions

What is CVE-2023-20561?
CVE-2023-20561 is a vulnerability in AMD ?Prof that allows an authenticated user to send an arbitrary address, potentially causing a Windows crash leading to denial of service.
Which versions of AMD ?Prof are affected by CVE-2023-20561?
Versions up to and including 4.1.396 and versions up to exclusive 4.1-424 of AMD ?Prof are affected by CVE-2023-20561.
What is IOCTL (Input Output Control)?
IOCTL (Input Output Control) is a system call used to communicate with drivers and control devices in a computer system.
Is Microsoft Windows affected by CVE-2023-20561?
No, Microsoft Windows is not affected by CVE-2023-20561.
Is Linux Kernel affected by CVE-2023-20561?
No, Linux Kernel is not affected by CVE-2023-20561.
What is the severity of CVE-2023-20561?
CVE-2023-20561 has a severity rating of medium with a value of 5.5.
Where can I find more information about CVE-2023-20561?
You can find more information about CVE-2023-20561 on the AMD product security bulletin.

collector/nvd-api
collector/nvd-index
agent/author
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/title
agent/severity
agent/references
agent/last-modified-date
agent/tags
agent/first-publish-date
agent/event
agent/description
vendor/amd
canonical/amd amd uprof
vendor/microsoft
canonical/microsoft windows
vendor/linux
canonical/linux linux kernel

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.