CVE-2013-6885 The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of....
MediumCVSS 4.7
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 3.14.2-1 | 3.14.2-1 |
| debian/linux(Debian:13) | < 3.14.2-1 | 3.14.2-1 |
| debian/linux(Debian:14) | < 3.14.2-1 | 3.14.2-1 |
| amd 16h model processor firmware | All versions | No fix listed |
| amd 16h model 00h processor | All versions | No fix listed |
| amd 16h model 0fh processor | All versions | No fix listed |
References
- Debian Security Tracker CVE-2013-6885 vendor-advisory
- [kernel] 20111225 Buildworld loop seg-fault update -- I believe it is hardware mailing-list
- FEDORA-2013-22754 vendor-advisory
- FEDORA-2013-22888 vendor-advisory
- FEDORA-2013-22866 vendor-advisory
- SUSE-SU-2014:0372 vendor-advisory
- SUSE-SU-2014:0373 vendor-advisory
- SUSE-SU-2014:0411 vendor-advisory
- SUSE-SU-2014:0446 vendor-advisory
- SUSE-SU-2014:0459 vendor-advisory
- SUSE-SU-2014:0470 vendor-advisory
- [oss-security] 20131127 CVE-2013-6885 AMD Publ. 51810 Errata 793 system hang mailing-list
- RHSA-2014:0285 vendor-advisory
- 55840 third-party-advisory
- GLSA-201407-03 vendor-advisory
- support.amd.com
- DSA-3128 vendor-advisory
- [oss-security] 20131202 Xen Security Advisory 82 (CVE-2013-6885) - Guest triggerable AMD CPU erratum may cause host to hang mailing-list
- 63983 vdb-entry
- 1029415 vdb-entry
- www.zdnet.com
- bugzilla.redhat.com
- xen-cve20136885-dos(89335) vdb-entry