Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
References
| Link | Resource |
|---|---|
| https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2 | Not Applicable |
| https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206 | Not Applicable |
| https://github.com/adamreiser/dmiwrite | Exploit Third Party Advisory |
| https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html | Mailing List Patch Release Notes Vendor Advisory |
Configurations
History
28 Sep 2023, 17:54
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
21 Apr 2023, 04:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206 - Not Applicable | |
| References | (MISC) https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2 - Not Applicable | |
| References | (MISC) https://github.com/adamreiser/dmiwrite - Exploit, Third Party Advisory | |
| References | (MISC) https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html - Mailing List, Patch, Release Notes, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Nongnu dmidecode
Nongnu |
|
| CPE | cpe:2.3:a:nongnu:dmidecode:*:*:*:*:*:*:*:* |
13 Apr 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-13 16:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-30630
Mitre link : CVE-2023-30630
CVE.ORG link : CVE-2023-30630
JSON object : View
Products Affected
nongnu
- dmidecode
CWE