CVE-2023-30630
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance...
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
CVE-2023-30630- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-23
- Updated
- 2026-11-02
CVE List
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
CVE-2023-30630- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Weakness
- CWE-23
- Updated
- 2026-11-02
EUVDEUVD-2023-34994
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
EUVD-2023-34994- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9r2p-xmm5-5ppg
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance...
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
- Record
GHSA-9r2p-xmm5-5ppg- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-23
- Updated
- 2026-11-02
OSVAZL-26138
CVE-2023-30630 affecting package dmidecode for versions less than 3.5-1
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
AZL-26138- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2023-30630
- Record
BELL-CVE-2023-30630- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
Show 24 moreShow less
OSV
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
CVE-2023-30630- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-30630
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
DEBIAN-CVE-2023-30630- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2023-1264
dmidecode security update
Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard (see a sample output). This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as a lot of other details of varying level of interest and reliability depending on the manufacturer. This will often include usage status for the CPU sockets, expansion slots (e.g. AGP, PCI, ISA) and memory module slots, and the list of I/O ports (e.g. serial, parallel, USB).DMI data can be used to enable or disable specific portions of kernel code depending on the specific hardware. Thus, one use of dmidecode is for kernel developers to detect system "signatures" and add them to the kernel source code when needed.
Security Fix(es):
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.(CVE-2023-30630)
- Record
OESA-2023-1264- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2023:5061
Red Hat Security Advisory: dmidecode security update
- Record
RHSA-2023:5061- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2023:5252
Red Hat Security Advisory: dmidecode security update
- Record
RHSA-2023:5252- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-30630
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
- Record
UBUNTU-CVE-2023-30630- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2023:5061 No score
Moderate: dmidecode security update
The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.
Security Fix(es):
- dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:5061- Updated
- 2026-11-02
OSVALSA-2023:5252 No score
Moderate: dmidecode security update
The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.
Security Fix(es):
- dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2023:5252- Updated
- 2026-11-02
OSVCLSA-2025-1755004236 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: do not let --dump-bin overwrite an existing file
- Record
CLSA-2025-1755004236- Updated
- 2026-11-02
OSVCLSA-2025-1755008582 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: do not let --dump-bin overwrite an existing file
- Record
CLSA-2025-1755008582- Updated
- 2026-11-02
OSVCLSA-2025-1755271152 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: prevent --dump-bin from overwriting local files to address privilege escalation vulnerability
- Record
CLSA-2025-1755271152- Updated
- 2026-11-02
OSVCLSA-2025-1755271747 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: prevent --dump-bin from overwriting local files to address privilege escalation vulnerability
- Record
CLSA-2025-1755271747- Updated
- 2026-11-02
OSVCLSA-2025-1758228073 No score
Fix CVE(s): CVE-2023-30630
- SECURITY UPDATE: Overwrite a local file
- debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability
- CVE-2023-30630
- Record
CLSA-2025-1758228073- Updated
- 2026-11-02
OSVCLSA-2025-1758228143 No score
Fix CVE(s): CVE-2023-30630
- SECURITY UPDATE: Overwrite a local file
- debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability
- CVE-2023-30630
- Record
CLSA-2025-1758228143- Updated
- 2026-11-02
OSVCLSA-2025-1762449077 No score
Fix CVE(s): CVE-2023-30630
- SECURITY UPDATE: Overwrite a local file
- debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability
- CVE-2023-30630
- Record
CLSA-2025-1762449077- Updated
- 2026-11-02
OSVCLSA-2026-1777040413 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: do not let --dump-bin overwrite an existing file
- Record
CLSA-2026-1777040413- Updated
- 2026-11-02
OSVCLSA-2026-1777538564 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: do not let --dump-bin overwrite an existing file
- Record
CLSA-2026-1777538564- Updated
- 2026-11-02
OSVCLSA-2026-1777996005 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: do not let --dump-bin overwrite an existing file
- Record
CLSA-2026-1777996005- Updated
- 2026-11-02
OSVCLSA-2026-1777996588 No score
dmidecode: Fix of CVE-2023-30630
- CVE-2023-30630: do not let --dump-bin overwrite an existing file
- Record
CLSA-2026-1777996588- Updated
- 2026-11-02
OSVMGASA-2023-0180 No score
Updated dmidecode packages fix security vulnerability
Dmidecode allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. (CVE-2023-30630)
- Record
MGASA-2023-0180- Updated
- 2026-11-02
OSVRLSA-2023:5061 No score
Moderate: dmidecode security update
The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.
Security Fix(es):
- dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2023:5061- Updated
- 2026-11-02
OSVSUSE-SU-2023:1947-1 No score
Security update for dmidecode
This update for dmidecode fixes the following issues:
- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
- Record
SUSE-SU-2023:1947-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2044-1 No score
Security update for dmidecode
This update for dmidecode fixes the following issues:
- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
- Record
SUSE-SU-2023:2044-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:2215-1 No score
Security update for dmidecode
This update for dmidecode fixes the following issues:
- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
- Record
SUSE-SU-2023:2215-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dmidecodeAlmaLinux:9 |
before 1:3.3-7.el9_2.1 | 1:3.3-7.el9_2.1 |
dmidecodeAlmaLinux:8 |
before 1:3.3-4.el8_8.1 | 1:3.3-4.el8_8.1 |
dmidecodeAzure Linux:2 |
before 3.5-1 | 3.5-1 |
dmidecodeAlpaquita:23 |
3.4-r0 up to 3.5-r0 | 3.5-r0 |
dmidecodeTuxCare:CentOS:8.4 |
before 1:3.2-8.el8.tuxcare.els1 | 1:3.2-8.el8.tuxcare.els1 |
dmidecodeTuxCare:CentOS:8.5 |
before 1:3.2-10.el8.tuxcare.els1 | 1:3.2-10.el8.tuxcare.els1 |
dmidecodeTuxCare:OracleLinux:6 |
before 1:2.12-7.el6.tuxcare.els1 | 1:2.12-7.el6.tuxcare.els1 |
dmidecodeTuxCare:CentOS:6 |
before 1:2.12-7.el6.tuxcare.els1 | 1:2.12-7.el6.tuxcare.els1 |
dmidecodeTuxCare:Ubuntu:18.04 |
before 3.1-1ubuntu0.1+tuxcare.els1 | 3.1-1ubuntu0.1+tuxcare.els1 |
dmidecodeTuxCare:Ubuntu:16.04 |
before 3.0-2ubuntu0.2+tuxcare.els1 | 3.0-2ubuntu0.2+tuxcare.els1 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
dmidecodeTuxCare:Debian:10 |
before 3.2-1+tuxcare.els1 | 3.2-1+tuxcare.els1 |
dmidecodeTuxCare:CentOS-Stream:8 |
before 1:3.3-4.el8.tuxcare.els1 | 1:3.3-4.el8.tuxcare.els1 |
dmidecodeTuxCare:OracleLinux:7 |
before 1:3.2-5.0.1.el7_9.1.tuxcare.els1 | 1:3.2-5.0.1.el7_9.1.tuxcare.els1 |
dmidecodeTuxCare:RHEL:7 |
before 1:3.2-5.el7_9.1.tuxcare.els1 | 1:3.2-5.el7_9.1.tuxcare.els1 |
dmidecodeTuxCare:CentOS:7 |
before 1:3.2-5.el7_9.1.tuxcare.els1 | 1:3.2-5.el7_9.1.tuxcare.els1 |
dmidecodeDebian:12 |
All versions, plus listed versions 3.4-13.5-13.5-23.5-33.6-13.6-23.7-1 |
None known |
dmidecodeDebian:13 |
before 3.5-1 | 3.5-1 |
dmidecodeDebian:14 |
before 3.5-1 | 3.5-1 |
dmidecodeMageia:8 |
before 3.5-1.mga8 | 3.5-1.mga8 |
dmidecodeopenEuler:20.03-LTS-SP1 |
before 3.2-4.oe1 | 3.2-4.oe1 |
dmidecodeopenEuler:20.03-LTS-SP3 |
before 3.2-4.oe1 | 3.2-4.oe1 |
dmidecodeopenEuler:22.03-LTS |
before 3.4-3.oe2203sp1 | 3.4-3.oe2203sp1 |
dmidecodeopenEuler:22.03-LTS-SP1 |
before 3.4-3.oe2203sp1 | 3.4-3.oe2203sp1 |
dmidecodeRed Hat:enterprise_linux:9::baseos |
before 1:3.3-7.el9_2.1 | 1:3.3-7.el9_2.1 |
dmidecode-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:3.3-7.el9_2.1 | 1:3.3-7.el9_2.1 |
dmidecode-debugsourceRed Hat:enterprise_linux:9::baseos |
before 1:3.3-7.el9_2.1 | 1:3.3-7.el9_2.1 |
dmidecodeRed Hat:enterprise_linux:8::baseos |
before 1:3.3-4.el8_8.1 | 1:3.3-4.el8_8.1 |
dmidecode-debuginfoRed Hat:enterprise_linux:8::baseos |
before 1:3.3-4.el8_8.1 | 1:3.3-4.el8_8.1 |
dmidecode-debugsourceRed Hat:enterprise_linux:8::baseos |
before 1:3.3-4.el8_8.1 | 1:3.3-4.el8_8.1 |
dmidecodeRocky Linux:9 |
before 1:3.3-7.el9_2.1 | 1:3.3-7.el9_2.1 |
dmidecodeSUSE:Linux Enterprise Micro 5.3 |
before 3.4-150400.16.8.1 | 3.4-150400.16.8.1 |
dmidecodeSUSE:Linux Enterprise Micro 5.4 |
before 3.4-150400.16.8.1 | 3.4-150400.16.8.1 |
dmidecodeSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 3.4-150400.16.8.1 | 3.4-150400.16.8.1 |
dmidecodeopenSUSE:Leap Micro 5.3 |
before 3.4-150400.16.8.1 | 3.4-150400.16.8.1 |
dmidecodeopenSUSE:Leap 15.4 |
before 3.4-150400.16.8.1 | 3.4-150400.16.8.1 |
dmidecodeSUSE:OpenStack Cloud 9 |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:OpenStack Cloud Crowbar 9 |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise Server 12 SP2-BCL |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise Server 12 SP4-ESPOS |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise Server 12 SP5 |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.0-10.6.1 | 3.0-10.6.1 |
dmidecodeSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Real Time 15 SP3 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Manager Proxy 4.2 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Manager Server 4.2 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Micro 5.1 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Linux Enterprise Micro 5.2 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Enterprise Storage 7 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeSUSE:Enterprise Storage 7.1 |
before 3.2-150100.9.16.1 | 3.2-150100.9.16.1 |
dmidecodeUbuntu:14.04:LTS |
All versions, plus listed versions 2.12-2 |
None known |
dmidecodeUbuntu:16.04:LTS |
All versions, plus listed versions 2.12-43.0-23.0-2ubuntu0.13.0-2ubuntu0.2 |
None known |
dmidecodeUbuntu:18.04:LTS |
All versions, plus listed versions 3.1-13.1-1ubuntu0.1 |
None known |
dmidecodeUbuntu:20.04:LTS |
All versions, plus listed versions 3.2-23.2-3 |
None known |
cpu-xUbuntu:20.04:LTS |
All versions, plus listed versions 3.2.4-13.2.4-23.2.4-33.2.4-3build13.2.4-3build2 |
None known |
cpu-xUbuntu:22.04:LTS |
All versions, plus listed versions 4.1.0-24.2.0-1 |
None known |
dmidecodeUbuntu:22.04:LTS |
All versions, plus listed versions 3.3-33.3-3ubuntu0.13.3-3ubuntu0.2 |
None known |
cpu-xUbuntu:24.04:LTS |
All versions, plus listed versions 4.5.3-15.0.3-25.0.3-2build15.0.3-2build2 |
None known |
cpu-xUbuntu:25.10 |
All versions, plus listed versions 5.1.3-0.15.2.0-0.45.3.1-0.25.3.1-0.3 |
None known |
cpu-xUbuntu:26.10 |
All versions, plus listed versions 5.4.0-0.25.4.0-15.4.0-25.4.0-2build1 |
None known |
cpu-xUbuntu:26.04:LTS |
All versions, plus listed versions 5.3.1-0.35.4.0-0.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-30630 is a high vulnerability (CVSS 7.1) in Nongnu Dmidecode, published April 13, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in dmidecode 1:3.3-7.el9_2.1.
References
github.com/adamreiser/dmiwrite
lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html
git.savannah.nongnu.org/cgit/dmidecode.git/commit?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206
nvd.nist.gov/vuln/detail/CVE-2023-30630
Show 37 moreShow less
access.redhat.com/errata/RHSA-2023:5061
bugzilla.redhat.com/2186669
errata.almalinux.org/9/ALSA-2023-5061.html
docs.bell-sw.com/security/cves/CVE-2023-30630
errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1755004236.html
security-tracker.debian.org/tracker/CVE-2023-30630
advisories.mageia.org/MGASA-2023-0180.html
bugs.mageia.org/show_bug.cgi?id=31883
lists.suse.com/pipermail/sle-security-updates/2023-April/014548.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1264
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5061.json
cve.org/CVERecord?id=CVE-2023-30630
errata.rockylinux.org/RLSA-2023:5061
suse.com/support/update/announcement/2023/suse-su-20231947-1
bugzilla.suse.com/1210418
ubuntu.com/security/CVE-2023-30630