CVE-2023-31366: Input Validation
Improper input validation in AMD ?Prof could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.
Other sources
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31366?
CVE-2023-31366 has been rated as a medium severity vulnerability due to its potential for denial of service.
How do I fix CVE-2023-31366?
To mitigate CVE-2023-31366, users should upgrade AMD μProf to versions above 4.1.424 for Linux, 4.2.816 for FreeBSD, and 4.2.845 for Windows.
What types of systems are affected by CVE-2023-31366?
CVE-2023-31366 affects AMD μProf versions below 4.1.424 on Linux, below 4.2.816 on FreeBSD, and below 4.2.845 on Windows.
What actions can an attacker perform due to CVE-2023-31366?
An attacker exploiting CVE-2023-31366 could perform a write to an invalid address, potentially leading to a denial of service.
Is there a patch available for CVE-2023-31366?
Yes, users can apply available patches by upgrading to the fixed versions of AMD μProf to resolve CVE-2023-31366.