Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dmidecode | Nongnu | * | 3.5 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | dmidecode-1:3.3-4.el8_8.1 | * |
| Red Hat Enterprise Linux 9 | RedHat | dmidecode-1:3.3-7.el9_2.1 | * |
| Cpu-x | Ubuntu | kinetic | * |
| Cpu-x | Ubuntu | lunar | * |
| Cpu-x | Ubuntu | mantic | * |
| Cpu-x | Ubuntu | trusty | * |
| Cpu-x | Ubuntu | xenial | * |
| Dmidecode | Ubuntu | bionic | * |
| Dmidecode | Ubuntu | esm-infra/bionic | * |
| Dmidecode | Ubuntu | focal | * |
| Dmidecode | Ubuntu | jammy | * |
| Dmidecode | Ubuntu | kinetic | * |
| Dmidecode | Ubuntu | lunar | * |
| Dmidecode | Ubuntu | mantic | * |
| Dmidecode | Ubuntu | trusty | * |
| Dmidecode | Ubuntu | trusty/esm | * |
| Dmidecode | Ubuntu | upstream | * |
| Dmidecode | Ubuntu | xenial | * |