CVE-2023-20593

31 de julio de 2023

Hemos recibido recientemente del CCN-CERT, esta última información:

Publication Date: 07/28/2023 3:30PM PDT AWS is aware of CVE-2023-20593, otherwise known as "Zenbleed", and can confirm this issue affected AMD “Zen 2”, also known as “Rome”, CPUs that power the C5a, C5ad, G4ad, and G5 instance families. Because of the design of the EC2 Nitro hypervisor, there is no risk of cross-instance data access. The updated microcode from AMD has been applied to all C5a, C5ad, G4ad, and G5 instances. No action is required from customers

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2023-004/

Puedes encontrar más detalles sobre a continuación:

http://www.ccn-cert.cni.es/component/vulnerabilidades/view/34518.html