{"id":"CVE-2023-20573","aliases":["EUVD-2023-24752","GHSA-6hrc-q74x-c8g8","openSUSE-SU-2024:13589-1"],"status":"published","title":"Debug Exception Delivery in Secure Nested Paging","description":"A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially\nresulting in guests not receiving expected debug information.","severity":{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00289,"percentile":0.21549,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-693"],"published":"2024-01-11T13:53:52Z","modified":"2026-06-17T05:30:20Z","exploits":[{"source":"pocgithub","id":"Freax13/cve-2023-20573-poc","title":"Freax13/cve-2023-20573-poc","date":"2023-03-11","url":"https://github.com/Freax13/cve-2023-20573-poc"}],"products":[{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"4th gen amd epyc™ processors"},{"vendor":"amd","product":"epyc_7203_firmware"},{"vendor":"amd","product":"epyc_7203p_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7303_firmware"},{"vendor":"amd","product":"epyc_7303p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_73f3_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7453_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7643p_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7663p_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_8024p_firmware"},{"vendor":"amd","product":"epyc_8024pn_firmware"},{"vendor":"amd","product":"epyc_8124p_firmware"},{"vendor":"amd","product":"epyc_8124pn_firmware"},{"vendor":"amd","product":"epyc_8224p_firmware"},{"vendor":"amd","product":"epyc_8224pn_firmware"},{"vendor":"amd","product":"epyc_8324p_firmware"},{"vendor":"amd","product":"epyc_8324pn_firmware"},{"vendor":"amd","product":"epyc_8434p_firmware"},{"vendor":"amd","product":"epyc_8434pn_firmware"},{"vendor":"amd","product":"epyc_8534p_firmware"},{"vendor":"amd","product":"epyc_8534pn_firmware"},{"vendor":"amd","product":"epyc_9124_firmware"},{"vendor":"amd","product":"epyc_9174f_firmware"},{"vendor":"amd","product":"epyc_9184x_firmware"},{"vendor":"amd","product":"epyc_9224_firmware"},{"vendor":"amd","product":"epyc_9254_firmware"},{"vendor":"amd","product":"epyc_9274f_firmware"},{"vendor":"amd","product":"epyc_9334_firmware"},{"vendor":"amd","product":"epyc_9354_firmware"},{"vendor":"amd","product":"epyc_9354p_firmware"},{"vendor":"amd","product":"epyc_9374f_firmware"},{"vendor":"amd","product":"epyc_9384x_firmware"},{"vendor":"amd","product":"epyc_9454_firmware"},{"vendor":"amd","product":"epyc_9454p_firmware"},{"vendor":"amd","product":"epyc_9474f_firmware"},{"vendor":"amd","product":"epyc_9534_firmware"},{"vendor":"amd","product":"epyc_9554_firmware"},{"vendor":"amd","product":"epyc_9554p_firmware"},{"vendor":"amd","product":"epyc_9634_firmware"},{"vendor":"amd","product":"epyc_9654_firmware"},{"vendor":"amd","product":"epyc_9654p_firmware"},{"vendor":"amd","product":"epyc_9684x_firmware"},{"vendor":"amd","product":"epyc_9734_firmware"},{"vendor":"amd","product":"epyc_9754_firmware"},{"vendor":"amd","product":"epyc_9754s_firmware"}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3006","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-20573"},{"url":"https://github.com/advisories/GHSA-6hrc-q74x-c8g8"},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20573","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-20573","title":"Debug Exception Delivery in Secure Nested Paging","description":"A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially\nresulting in guests not receiving expected debug information.\n\n\n\n","status":"published","published":"2024-01-11T13:53:52.581Z","modified":"2025-06-20T16:12:15.413Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:35:13.912858Z"}],"euvd":[{"id":"EUVD-2023-24752","description":"A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially\nresulting in guests not receiving expected debug information.\n\n\n\n","status":"published","published":"2024-01-11T13:53:52Z","modified":"2025-06-20T16:12:15Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:32:19.507179Z"}],"ghsa":[{"id":"GHSA-6hrc-q74x-c8g8","title":"A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially...","description":"A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially\nresulting in guests not receiving expected debug information.","status":"published","published":"2024-01-11T15:30:26Z","modified":"2025-06-20T21:32:39Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T15:02:47.356918Z"}],"nvd":[{"id":"CVE-2023-20573","description":"A privileged attacker\ncan prevent delivery of debug exceptions to SEV-SNP guests potentially\nresulting in guests not receiving expected debug information.\n\n\n\n","status":"published","published":"2024-01-11T14:15:43.963Z","modified":"2026-06-17T05:30:20.593Z","cvss":[{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"3.1","score":3.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-693"],"updated_at":"2026-11-02T14:09:00.788714Z"}],"osv":[{"id":"openSUSE-SU-2024:13589-1","title":"libBasicUsageEnvironment2-2023.11.30-1.1 on GA media","description":"These are all security issues fixed in the libBasicUsageEnvironment2-2023.11.30-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:19.379479Z","updated_at":"2026-11-02T16:58:36.327643Z"}]}}