CVE-2023-20561: Medium severity amd uprof vulnerability
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD ?Prof may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.
Other sources
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-20561?
CVE-2023-20561 is a vulnerability in AMD ?Prof that allows an authenticated user to send an arbitrary address, potentially causing a Windows crash leading to denial of service.
Which versions of AMD ?Prof are affected by CVE-2023-20561?
Versions up to and including 4.1.396 and versions up to exclusive 4.1-424 of AMD ?Prof are affected by CVE-2023-20561.
What is IOCTL (Input Output Control)?
IOCTL (Input Output Control) is a system call used to communicate with drivers and control devices in a computer system.
Is Microsoft Windows affected by CVE-2023-20561?
No, Microsoft Windows is not affected by CVE-2023-20561.
Is Linux Kernel affected by CVE-2023-20561?
No, Linux Kernel is not affected by CVE-2023-20561.
What is the severity of CVE-2023-20561?
CVE-2023-20561 has a severity rating of medium with a value of 5.5.
Where can I find more information about CVE-2023-20561?
You can find more information about CVE-2023-20561 on the AMD product security bulletin.