Most recent entries from all

ALSA-2023:5061 — Moderate: dmidecode security update

Affected: AlmaLinux:9: dmidecode

The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.

Security Fix(es):

* dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-07470

BELL-CVE-2023-30630

Affected: Alpaquita:23: dmidecode

certfr-2024-avi-0575 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent…

certfr-2024-avi-0575

EUVD-2026-220474

fkie_cve-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).

GHSA-9r2p-xmm5-5ppg

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.

gsd-2023-30630

msrc_CVE-2023-30630 — Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because for example execut…

msrc_CVE-2023-30630

OESA-2023-1264 — dmidecode security update

Affected: openEuler:20.03-LTS-SP1: dmidecode, openEuler:20.03-LTS-SP3: dmidecode, openEuler:22.03-LTS: dmidecode, openEuler:22.03-LTS-SP1: dmidecode

Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard (see a sample output). This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as a lot of other details of varying level of interest and reliability depending on the manufacturer. This will often include usage status for the CPU sockets, expansion slots (e.g. AGP, PCI, ISA) and memory module slots, and the list of I/O ports (e.g. serial, parallel, USB).DMI data can be used to enable or disable specific portions of kernel code depending on the specific hardware. Thus, one use of dmidecode is for kernel developers to detect system "signatures" and add them to the kernel source code when needed. Security Fix(es): Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.(CVE-2023-30630)

RHSA-2023:5061 — Red Hat Security Advisory: dmidecode security update

dmidecode: dump-bin to overwrite a local file

SUSE-SU-2023:2044-1 — Security update for dmidecode

Security update for dmidecode

UBUNTU-CVE-2023-30630

Affected: Ubuntu:14.04:LTS: dmidecode, Ubuntu:16.04:LTS: dmidecode, Ubuntu:18.04:LTS: dmidecode, Ubuntu:20.04:LTS: dmidecode, Ubuntu:20.04:LTS: cpu-x, Ubuntu:22.04:LTS: cpu-x, Ubuntu:22.04:LTS: dmidecode, Ubuntu:24.04:LTS: cpu-x, Ubuntu:25.10: cpu-x, Ubuntu:26.04:LTS: cpu-x

WID-SEC-W-2023-2320 — Red Hat Enterprise Linux(dmidecode): Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.