CVE-2023-30630: High severity dmidecode vulnerability
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
Other sources
Dmidecode could allow a local authetnicated attacker to bypass security restrictions, caused by a flaw in the -dump-bin command. By sending a specially crafted request, an attacker could exploit this vulnerability to overwrite a local file.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30630?
The severity of CVE-2023-30630 has not been explicitly rated, but it poses a risk due to its potential to overwrite local files.
How do I fix CVE-2023-30630?
To fix CVE-2023-30630, upgrade Dmidecode to version 3.5 or later.
What systems are affected by CVE-2023-30630?
CVE-2023-30630 affects Dmidecode versions prior to 3.5 and IBM Security Verify Governance components up to ISVG 10.0.2.
What is the impact of CVE-2023-30630?
The impact of CVE-2023-30630 includes the risk of local file overwrites, which could lead to privilege escalation or data loss.
Is CVE-2023-30630 exploitable?
Yes, CVE-2023-30630 is exploitable when Dmidecode is executed with elevated privileges, such as via Sudo.