Lucene search
Redhat.comRH:CVE-2023-30630HistoryApr 14, 2023 - 5:30 a.m.
CVE-2023-30630
2023-04-1405:30:39
redhat.com
access.redhat.com
41
cve-2023-30630
dmidecode
local file overwrite
sudo
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
0
Percentile
9.8%
A vulnerability was found in dmidecode, which allows -dump-bin to overwrite a local file. This issue may lead to the execution of dmidecode via Sudo.
Mitigation
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Related
cbl_mariner
cbl_mariner
CVE-2023-30630 affecting package dmidecode for versions less than 3.5-1
2023-05-25 09:38:10
gentoo
gentoo
Dmidecode: Privilege Escalation
2024-07-24 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for dmidecode (EulerOS-SA-2023-2309)
2023-07-10 00:00:00
Huawei EulerOS: Security Advisory for dmidecode (EulerOS-SA-2023-2351)
2023-07-17 00:00:00
Huawei EulerOS: Security Advisory for dmidecode (EulerOS-SA-2023-3396)
2023-12-14 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : dmidecode (EulerOS-SA-2023-2309)
2023-07-09 00:00:00
Oracle Linux 9 : dmidecode (ELSA-2023-5061)
2023-09-13 00:00:00
EulerOS Virtualization 3.0.6.0 : dmidecode (EulerOS-SA-2023-3427)
2024-01-16 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2282
2023-10-24 14:17:14
ibm
ibm
amazon
amazon
Medium: dmidecode
2024-01-03 21:04:00
almalinux
almalinux
Moderate: dmidecode security update
2023-09-19 00:00:00
Moderate: dmidecode security update
2023-09-12 00:00:00
redhat
redhat
(RHSA-2023:5252) Moderate: dmidecode security update
2023-09-19 12:37:13
(RHSA-2023:5061) Moderate: dmidecode security update
2023-09-12 07:41:27
debiancve
debiancve
CVE-2023-30630
2023-04-13 16:15:07
ubuntucve
ubuntucve
CVE-2023-30630
2023-04-13 00:00:00
prion
prion
Design/Logic Flaw
2023-04-13 16:15:00
osv
osv
CVE-2023-30630
2023-04-13 16:15:07
Moderate: dmidecode security update
2023-09-12 00:00:00
Moderate: dmidecode security update
2023-09-26 13:26:39
alpinelinux
alpinelinux
CVE-2023-30630
2023-04-13 16:15:07
mageia
mageia
Updated dmidecode packages fix security vulnerability
2023-05-21 11:42:44
oraclelinux
oraclelinux
dmidecode security update
2023-09-20 00:00:00
dmidecode security update
2023-09-13 00:00:00
rocky
rocky
dmidecode security update
2023-09-26 13:26:39
nvd
nvd
CVE-2023-30630
2023-04-13 16:15:07
veracode
veracode
Local File Inclusion (LFI)
2023-08-07 01:34:31
cve
cve
CVE-2023-30630
2023-04-13 16:15:07
cvelist
cvelist
CVE-2023-30630
2023-04-13 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0386
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0575
2023-05-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0018
2023-06-06 00:00:00
CVSS3
7.1
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
0
Percentile
9.8%
Related for RH:CVE-2023-30630