« Volver al listado

CVE-2023-31366

Estado: ModificadaMedia (5.5)—

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

AMD — Uprof

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-31366",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-31366",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-14T16:05:31.109198Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@amd.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@amd.com",
      "affectedData": [
        {
          "vendor": "AMD",
          "product": "μProf Tool",
          "versions": [
            {
              "status": "affected",
              "version": "μProf Tool",
              "lessThan": "3.4.494",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-08-13T17:15:21.913",
  "references": [
    {
      "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@amd.com"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@amd.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service."
    },
    {
      "lang": "es",
      "value": "Una validación de entrada incorrecta en AMD ?Prof podría permitir que un atacante realice una escritura en una dirección no válida, lo que podría resultar en una denegación de servicio."
    }
  ],
  "lastModified": "2026-06-17T05:56:51.947",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:amd:uprof:*:*:*:*:*:linux:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B13FA61-9E51-45AF-A0F8-0C3A518B390A",
              "versionEndExcluding": "4.1.424"
            },
            {
              "criteria": "cpe:2.3:a:amd:uprof:*:*:*:*:*:freebsd:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50D6F227-1657-451F-AF90-A68B6A4BF03A",
              "versionEndExcluding": "4.2.816"
            },
            {
              "criteria": "cpe:2.3:a:amd:uprof:*:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E175F21E-6872-42B1-8C4C-6B473440EE12",
              "versionEndExcluding": "4.2.845"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@amd.com"
}