CVE-2023-30630

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-30630
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2 Not Applicable
https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206 Not Applicable
https://github.com/adamreiser/dmiwrite Exploit Third Party Advisory
https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html Mailing List Patch Release Notes Vendor Advisory
https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2 Not Applicable
https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206 Not Applicable
https://github.com/adamreiser/dmiwrite Exploit Third Party Advisory
https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html Mailing List Patch Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nongnu:dmidecode:*:*:*:*:*:*:*:*
History

21 Nov 2024, 08:00

Type Values Removed Values Added
References () https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2 - Not Applicable () https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2 - Not Applicable
References () https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206 - Not Applicable () https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206 - Not Applicable
References () https://github.com/adamreiser/dmiwrite - Exploit, Third Party Advisory () https://github.com/adamreiser/dmiwrite - Exploit, Third Party Advisory
References () https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html - Mailing List, Patch, Release Notes, Vendor Advisory () https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html - Mailing List, Patch, Release Notes, Vendor Advisory

21 Apr 2023, 04:18

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-13 16:15

Updated : 2024-11-21 08:00

NVD link : CVE-2023-30630

Mitre link : CVE-2023-30630

CVE.ORG link : CVE-2023-30630

JSON object : View

Products Affected

nongnu

  • dmidecode
CWE
NVD-CWE-noinfo