PT-2023-6699 · Dmidecode+7 · Dmidecode+7

Published 2023-03-14 · Updated 2025-03-04 · CVE-2023-30630

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dmidecode versions prior to 3.5

Description The issue is related to insecure management of privileges in the Dmidecode utility of the Linux operating system. This allows an attacker to potentially elevate their privileges. The problem arises because Dmidecode's -dump-bin option can overwrite a local file, which has security implications, especially when Dmidecode is executed via Sudo.

Recommendations For versions prior to 3.5, update to version 3.5 or later to resolve the issue. As a temporary workaround, consider restricting the execution of Dmidecode via Sudo to minimize the risk of exploitation.

Exploit

Fix

Relative Path Traversal

Improper Privilege Management

Weakness Enumeration

CWE-23

CWE-269

Related Identifiers

ALSA-2023:5061

ALSA-2023:5252

AZL-26138

BDU:2023-07470

CESA-2023_5252

CVE-2023-30630

ECHO-4A7C-5102-1F27

MGASA-2023-0180

OESA-2023-1264

RHSA-2023:5061

RHSA-2023:5252

RHSA-2023_5061

RHSA-2023_5252

RLSA-2023:5061

ROSA-SA-2023-2282

SUSE-SU-2023:1947-1

SUSE-SU-2023:2044-1

SUSE-SU-2023:2215-1

SUSE-SU-2023_1947-1

SUSE-SU-2023_2044-1

SUSE-SU-2023_2215-1

Affected Products

Almalinux

Centos

Debian

Dmidecode

Red Hat

Red Os

Rocky Linux

Suse

References · 55

• 🔥 https://github.com/adamreiser/dmiwrite · Exploit
• https://osv.dev/vulnerability/ALSA-2023:5061 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-30630 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-5252.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-30630 · Vendor Advisory
• https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-5061.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07470 · Security Note
• https://errata.rockylinux.org/RLSA-2023:5061 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1264 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:5252 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-30630 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30630 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2044-1 · Vendor Advisory