CVE-2013-6885

Published: Nov 29, 2013Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue.

Affected (3)

Products: Amd: 16h Model Processor Firmware, 16h Model 00h Processor, 16h Model 0fh Processor

3 products

16h Model Processor Firmware

16h Model 00h Processor

16h Model 0fh Processor

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Amd 16h Model Processor Firmware	All versions
Amd 16h Model 00h Processor	All versions
Amd 16h Model 0fh Processor	All versions

Related CWEs

References (44)

http://lists.dragonflybsd.org/pipermail/kernel/2011-December/046594.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123553.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124195.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124199.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2013/11/28/1

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2014-0285.html

Source: secalert@redhat.com

http://secunia.com/advisories/55840

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: secalert@redhat.com

http://support.amd.com/TechDocs/51810_16h_00h-0Fh_Rev_Guide.pdf

Source: secalert@redhat.com

http://www.debian.org/security/2015/dsa-3128

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/12/02/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/63983

Source: secalert@redhat.com

http://www.securitytracker.com/id/1029415

Source: secalert@redhat.com

http://www.zdnet.com/blog/hardware/amd-owns-up-to-cpu-bug/18924

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1035823

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/89335

Source: secalert@redhat.com

http://lists.dragonflybsd.org/pipermail/kernel/2011-December/046594.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123553.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124195.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124199.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2013/11/28/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2014-0285.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55840

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.amd.com/TechDocs/51810_16h_00h-0Fh_Rev_Guide.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3128

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/12/02/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/63983

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1029415

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zdnet.com/blog/hardware/amd-owns-up-to-cpu-bug/18924

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1035823

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/89335

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.