CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).

Affected Software

Name	Vendor	Start Version	End Version
Dmidecode	Nongnu	*	3.5 (excluding)
Red Hat Enterprise Linux 8	RedHat	dmidecode-1:3.3-4.el8_8.1	*
Red Hat Enterprise Linux 9	RedHat	dmidecode-1:3.3-7.el9_2.1	*
Cpu-x	Ubuntu	focal	*
Cpu-x	Ubuntu	kinetic	*
Cpu-x	Ubuntu	lunar	*
Cpu-x	Ubuntu	mantic	*
Cpu-x	Ubuntu	oracular	*
Cpu-x	Ubuntu	plucky	*
Cpu-x	Ubuntu	trusty	*
Cpu-x	Ubuntu	xenial	*
Dmidecode	Ubuntu	bionic	*
Dmidecode	Ubuntu	esm-infra/bionic	*
Dmidecode	Ubuntu	esm-infra/focal	*
Dmidecode	Ubuntu	focal	*
Dmidecode	Ubuntu	jammy	*
Dmidecode	Ubuntu	kinetic	*
Dmidecode	Ubuntu	lunar	*
Dmidecode	Ubuntu	mantic	*
Dmidecode	Ubuntu	trusty	*
Dmidecode	Ubuntu	trusty/esm	*
Dmidecode	Ubuntu	upstream	*
Dmidecode	Ubuntu	xenial	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-30630
CWE	https://cwe.mitre.org/data/definitions/.html

Affected Software

References