CVE-2023-20573
Debug Exception Delivery in Secure Nested Paging
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
- Record
CVE-2023-20573- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N - Weakness
- CWE-693
- Updated
- 2026-11-02
CVE List
Debug Exception Delivery in Secure Nested Paging
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
- Record
CVE-2023-20573- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N - Weakness
- CWE-693
- Updated
- 2026-11-02
EUVDEUVD-2023-24752
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
- Record
EUVD-2023-24752- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6hrc-q74x-c8g8
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially...
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
- Record
GHSA-6hrc-q74x-c8g8- CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N - Weakness
- CWE-693
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13589-1 No score
libBasicUsageEnvironment2-2023.11.30-1.1 on GA media
These are all security issues fixed in the libBasicUsageEnvironment2-2023.11.30-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13589-1- Updated
- 2026-11-02
Affected products
- amd 3rd gen amd epyc™ processors
- amd 4th gen amd epyc™ processors
- amd epyc 7203 firmware
- amd epyc 7203p firmware
- amd epyc 72f3 firmware
- amd epyc 7303 firmware
- amd epyc 7303p firmware
- amd epyc 7313 firmware
- amd epyc 7313p firmware
- amd epyc 7343 firmware
- amd epyc 7373x firmware
- amd epyc 73f3 firmware
Show 55 moreShow less
- amd epyc 7413 firmware
- amd epyc 7443 firmware
- amd epyc 7443p firmware
- amd epyc 7453 firmware
- amd epyc 7473x firmware
- amd epyc 74f3 firmware
- amd epyc 7513 firmware
- amd epyc 7543 firmware
- amd epyc 7543p firmware
- amd epyc 7573x firmware
- amd epyc 75f3 firmware
- amd epyc 7643 firmware
- amd epyc 7643p firmware
- amd epyc 7663 firmware
- amd epyc 7663p firmware
- amd epyc 7713 firmware
- amd epyc 7713p firmware
- amd epyc 7763 firmware
- amd epyc 7773x firmware
- amd epyc 8024p firmware
- amd epyc 8024pn firmware
- amd epyc 8124p firmware
- amd epyc 8124pn firmware
- amd epyc 8224p firmware
- amd epyc 8224pn firmware
- amd epyc 8324p firmware
- amd epyc 8324pn firmware
- amd epyc 8434p firmware
- amd epyc 8434pn firmware
- amd epyc 8534p firmware
- amd epyc 8534pn firmware
- amd epyc 9124 firmware
- amd epyc 9174f firmware
- amd epyc 9184x firmware
- amd epyc 9224 firmware
- amd epyc 9254 firmware
- amd epyc 9274f firmware
- amd epyc 9334 firmware
- amd epyc 9354 firmware
- amd epyc 9354p firmware
- amd epyc 9374f firmware
- amd epyc 9384x firmware
- amd epyc 9454 firmware
- amd epyc 9454p firmware
- amd epyc 9474f firmware
- amd epyc 9534 firmware
- amd epyc 9554 firmware
- amd epyc 9554p firmware
- amd epyc 9634 firmware
- amd epyc 9654 firmware
- amd epyc 9654p firmware
- amd epyc 9684x firmware
- amd epyc 9734 firmware
- amd epyc 9754 firmware
- amd epyc 9754s firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Freax13/cve-2023-20573-poc | 2023-03-11 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-20573 is a low vulnerability (CVSS 3.2) in Amd 3rd Gen Amd Epyc™ Processors, published January 11, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. No source names a fixed version.