Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2023-08328 (CVE-2023-31320)
Vulnerability from fstec – Published: 2023-12-01 – Updated: 2023-12-01 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость драйвера графического дисплея микропрограммного обеспечения графических процессоров AMD Radeon, позволяющая нарушителю вызвать отказ в обслуживании
Summary
Уязвимость драйвера графического дисплея микропрограммного обеспечения графических процессоров AMD Radeon связана с некорректной зачисткой или освобождением ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
Aliases
References
Impacted products
24 products
from 1 vendor
Vendors
Advanced Micro Devices Inc.
Products
AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Radeon RX 7000 Series Graphics Cards, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Ryzen 7030 Series Processors with Radeon Graphics, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics
Versions
до 23.7.1 (23.10.01.45) (AMD Radeon RX 5000 Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Radeon RX 6000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W5000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W6000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Radeon RX 7000 Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7030 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7030 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7045 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7045 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7040 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7040 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 6000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 6000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7035 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7035 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7020 Series Processors with Radeon Graphics), AMD Ryzen 7020 Series Processors with Radeon Graphics (AMD Ryzen 7020 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7020 Series Processors with Radeon Graphics)
Product types
Микропрограммный код аппаратных компонентов компьютера, Firmware
Mitigations
Использование рекомендаций:
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
{
"CVSS 2.0": "AV:A/AC:L/Au:S/C:N/I:N/A:C",
"CVSS 3.0": "AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 5000 Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 6000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W5000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W6000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 7000 Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7030 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7030 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7045 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7045 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 6000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 6000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7035 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7035 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7020 Series Processors with Radeon Graphics), AMD Ryzen 7020 Series Processors with Radeon Graphics (AMD Ryzen 7020 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7020 Series Processors with Radeon Graphics)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "01.12.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "01.12.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-08328",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-31320, AMD-SB-6003",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Radeon RX 7000 Series Graphics Cards, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Ryzen 7030 Series Processors with Radeon Graphics, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0438\u0441\u043f\u043b\u0435\u044f \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Radeon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20), \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0430 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-404)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0438\u0441\u043f\u043b\u0435\u044f \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Radeon \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003\nhttps://vuldb.com/?id.245276",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20, CWE-404",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,7)"
}
BDU:2023-08329 (CVE-2021-46748)
Vulnerability from fstec – Published: 2023-12-01 – Updated: 2023-12-01 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость микропрограммного обеспечения процессоров AMD Secure Processor (ASP), позволяющая нарушителю вызвать отказ в обслуживании
Summary
Уязвимость микропрограммного обеспечения процессоров AMD Secure Processor (ASP) связана с возможностью записи за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Data structure manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-119 - Выход операции за границы буфера в памяти
Aliases
References
Impacted products
16 products
from 2 vendors
Vendors
Advanced Micro Devices Inc., Intel Corp.
Products
AMD Radeon Software, AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, Radeon RX Vega M, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Radeon RX 7000 Series Graphics Cards, AMD Ryzen 3000 Series Mobile processor with Radeon graphics
Versions
до 23.7.1 (AMD Radeon Software), до 23.7.1 (23.10.01.45) (AMD Radeon RX 5000 Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Radeon RX 6000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W5000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W6000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до 23.10.01.46 (Radeon RX Vega M), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Radeon RX 7000 Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics)
Product types
Application software, Микропрограммный код аппаратных компонентов компьютера, Firmware
Mitigations
Использование рекомендаций:
Для программных продуктов Intel Corp.:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html
Для программных продуктов Advanced Micro Devices Inc.
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc., Intel Corp.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 23.7.1 (AMD Radeon Software), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 5000 Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 6000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W5000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W6000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e 23.10.01.46 (Radeon RX Vega M), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 7000 Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: \n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel Corp.:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Advanced Micro Devices Inc.\nhttps://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "01.12.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "01.12.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-08329",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-46748, AMD-SB-6003",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Radeon Software, AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, Radeon RX Vega M, AMD Athlon 3000 Series Mobile processor with Radeon graphics, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Radeon RX 7000 Series Graphics Cards, AMD Ryzen 3000 Series Mobile processor with Radeon graphics",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Secure Processor (ASP), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u044b\u0445\u043e\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 (CWE-119)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Secure Processor (ASP) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html\nhttps://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-119",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}
BDU:2023-08330 (CVE-2023-20567)
Vulnerability from fstec – Published: 2023-12-01 – Updated: 2023-12-01 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость графического драйвера микропрограммного обеспечения графических процессоров AMD Radeon, позволяющая нарушителю выполнить произвольный код
Summary
Уязвимость графического драйвера микропрограммного обеспечения графических процессоров AMD Radeon связана с некорректной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Spoofing
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-347 - Некорректная проверка криптографической подписи
Aliases
References
Impacted products
24 products
from 2 vendors
Vendors
Advanced Micro Devices Inc., Intel Corp.
Products
AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, Radeon RX Vega M, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Radeon RX 7000 Series Graphics Cards, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Ryzen 7030 Series Processors with Radeon Graphics, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics
Versions
до 23.7.1 (23.10.01.45) (AMD Radeon RX 5000 Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Radeon RX 6000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W5000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W6000 Series Graphics Cards), до 23.Q3 (23.10.18.05) (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до 23.10.01.46 (Radeon RX Vega M), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Radeon RX 7000 Series Graphics Cards), до 23.7.1 (23.10.01.45) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7030 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7030 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7045 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7045 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7040 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7040 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 6000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 6000 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7035 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7035 Series Processors with Radeon Graphics), до 23.7.1 (23.10.01.45) (AMD Ryzen 7020 Series Processors with Radeon Graphics), до 23.Q3 (23.10.18.05) (AMD Ryzen 7020 Series Processors with Radeon Graphics)
Product types
Микропрограммный код аппаратных компонентов компьютера, Firmware
Mitigations
Использование рекомендаций:
Для программных продуктов Intel Corp.:
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html
Для программных продуктов Advanced Micro Devices Inc.
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
{
"CVSS 2.0": "AV:L/AC:L/Au:M/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc., Intel Corp.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 5000 Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 6000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W5000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W6000 Series Graphics Cards), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Radeon PRO W7000 Series Graphics Cards), - (AMD Radeon RX Vega Series Graphics Cards), - (AMD Radeon PRO WX Vega Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e 23.10.01.46 (Radeon RX Vega M), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Radeon RX 7000 Series Graphics Cards), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 5000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 5000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7030 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7030 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Athlon 3000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7045 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7045 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 6000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 6000 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7035 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7035 Series Processors with Radeon Graphics), \u0434\u043e 23.7.1 (23.10.01.45) (AMD Ryzen 7020 Series Processors with Radeon Graphics), \u0434\u043e 23.Q3 (23.10.18.05) (AMD Ryzen 7020 Series Processors with Radeon Graphics)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: \n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel Corp.:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Advanced Micro Devices Inc.\nhttps://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "01.12.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "01.12.2023",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-08330",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-20567, AMD-SB-6003",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Radeon RX Vega Series Graphics Cards, AMD Radeon PRO WX Vega Series Graphics Cards, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, Radeon RX Vega M, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics, AMD Radeon RX 7000 Series Graphics Cards, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 5000 Series Processors with Radeon Graphics, AMD Ryzen 7030 Series Processors with Radeon Graphics, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Radeon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (CWE-347)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Radeon \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html\nhttps://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-347",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,7)"
}