{"id":"CVE-2023-30630","aliases":["ALSA-2023:5061","ALSA-2023:5252","AZL-26138","BELL-CVE-2023-30630","CLSA-2025-1755004236","CLSA-2025-1755008582","CLSA-2025-1755271152","CLSA-2025-1755271747","CLSA-2025-1758228073","CLSA-2025-1758228143","CLSA-2025-1762449077","CLSA-2026-1777040413","CLSA-2026-1777538564","CLSA-2026-1777996005","CLSA-2026-1777996588","DEBIAN-CVE-2023-30630","EUVD-2023-34994","GHSA-9r2p-xmm5-5ppg","MGASA-2023-0180","OESA-2023-1264","RHSA-2023:5061","RHSA-2023:5252","RLSA-2023:5061","SUSE-SU-2023:1947-1","SUSE-SU-2023:2044-1","SUSE-SU-2023:2215-1","UBUNTU-CVE-2023-30630"],"status":"published","title":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance...","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0051,"percentile":0.43837,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-23"],"published":"2023-04-13T00:00:00Z","modified":"2026-11-08T10:45:10Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"dmidecode","fixed_in":["1:3.3-7.el9_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dmidecode","fixed_in":["1:3.3-4.el8_8.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"dmidecode","fixed_in":["3.5-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"dmidecode","fixed_in":["3.5-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"dmidecode","fixed_in":["1:3.2-8.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"dmidecode","fixed_in":["1:3.2-10.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"dmidecode","fixed_in":["1:2.12-7.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"dmidecode","fixed_in":["1:2.12-7.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"dmidecode","fixed_in":["3.1-1ubuntu0.1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"dmidecode","fixed_in":["3.0-2ubuntu0.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"dmidecode","fixed_in":["3.2-1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"dmidecode","fixed_in":["1:3.3-4.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"dmidecode","fixed_in":["1:3.2-5.0.1.el7_9.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"dmidecode","fixed_in":["1:3.2-5.el7_9.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dmidecode","fixed_in":["1:3.2-5.el7_9.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dmidecode","fixed_in":["3.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dmidecode","fixed_in":["3.5-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"dmidecode","fixed_in":["3.5-1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"dmidecode","fixed_in":["3.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"dmidecode","fixed_in":["3.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"dmidecode","fixed_in":["3.4-3.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"dmidecode","fixed_in":["3.4-3.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dmidecode","fixed_in":["1:3.3-7.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dmidecode-debuginfo","fixed_in":["1:3.3-7.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dmidecode-debugsource","fixed_in":["1:3.3-7.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dmidecode","fixed_in":["1:3.3-4.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dmidecode-debuginfo","fixed_in":["1:3.3-4.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dmidecode-debugsource","fixed_in":["1:3.3-4.el8_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"dmidecode","fixed_in":["1:3.3-7.el9_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dmidecode","fixed_in":["3.4-150400.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dmidecode","fixed_in":["3.4-150400.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"dmidecode","fixed_in":["3.4-150400.16.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"dmidecode","fixed_in":["3.4-150400.16.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"dmidecode","fixed_in":["3.4-150400.16.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dmidecode","fixed_in":["3.0-10.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"dmidecode","fixed_in":["3.2-150100.9.16.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-7.el9_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-4.el8_8.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.4-r0"},{"fixed":"3.5-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2-8.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2-10.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.12-7.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.12-7.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-1ubuntu0.1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-2ubuntu0.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-4.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2-5.0.1.el7_9.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2-5.el7_9.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2-5.el7_9.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4-1","3.5-1","3.5-2","3.5-3","3.6-1","3.6-2","3.7-1"]},{"source":"osv","ecosystem":"Debian:13","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-7.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dmidecode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-7.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dmidecode-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-7.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-4.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dmidecode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-4.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dmidecode-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-4.el8_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3-7.el9_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-150400.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-150400.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-150400.16.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-150400.16.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-150400.16.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-10.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150100.9.16.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12-4","3.0-2","3.0-2ubuntu0.1","3.0-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1-1","3.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-2","3.2-3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cpu-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.4-1","3.2.4-2","3.2.4-3","3.2.4-3build1","3.2.4-3build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cpu-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.0-2","4.2.0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dmidecode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3-3","3.3-3ubuntu0.1","3.3-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cpu-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.3-1","5.0.3-2","5.0.3-2build1","5.0.3-2build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cpu-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3-0.1","5.2.0-0.4","5.3.1-0.2","5.3.1-0.3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"cpu-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-0.2","5.4.0-1","5.4.0-2","5.4.0-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"cpu-x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.1-0.3","5.4.0-0.2"]}],"products":[{"vendor":"nongnu","product":"dmidecode"}],"references":[{"url":"https://github.com/adamreiser/dmiwrite","tags":["x_transferred","Exploit","Third Party Advisory","package","article","report"]},{"url":"https://lists.nongnu.org/archive/html/dmidecode-devel/2023-03/msg00003.html","tags":["x_transferred","Mailing List","Patch","Release Notes","Vendor Advisory","web","report"]},{"url":"https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=d8cfbc808f387e87091c25e7d5b8c2bb348bb206","tags":["x_transferred","Not Applicable","web"]},{"url":"https://git.savannah.nongnu.org/cgit/dmidecode.git/commit/?id=6ca381c1247c81f74e1ca4e7706f70bdda72e6f2","tags":["x_transferred","Not Applicable","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-30630","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-9r2p-xmm5-5ppg","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5061","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-30630","tags":["report"]},{"url":"https://bugzilla.redhat.com/2186669","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-5061.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5252","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-5252.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-30630","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1755004236.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1755008582.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1755271152.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1755271747.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1758228073.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1758228143.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1762449077.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1777040413.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777538564.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777996005.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777996588.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30630.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-30630","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0180.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31883","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-April/014548.html","tags":["web"]},{"url":"https://lists.nongnu.org/archive/html/dmidecode-devel/2023-04/msg00016.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1264","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186669","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5061.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-30630","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5252.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:5061","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231947-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1210418","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-30630","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232044-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232215-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-30630","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-30630","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T00:00:00Z","modified":"2025-03-04T21:16:05.02Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:35:22.309324Z"}],"euvd":[{"id":"EUVD-2023-34994","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T00:00:00Z","modified":"2025-03-04T21:16:05Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:16.995722Z"}],"ghsa":[{"id":"GHSA-9r2p-xmm5-5ppg","title":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance...","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.","status":"published","published":"2023-04-13T18:30:29Z","modified":"2025-02-07T18:32:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:59:50.611216Z"}],"nvd":[{"id":"CVE-2023-30630","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T16:15:07.93Z","modified":"2026-06-17T05:55:11.853Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-23"],"updated_at":"2026-11-02T14:07:55.652109Z"}],"osv":[{"id":"AZL-26138","title":"CVE-2023-30630 affecting package dmidecode for versions less than 3.5-1","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T16:15:07Z","modified":"2026-04-21T04:23:28.381777Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-30630","status":"published","published":"2023-04-13T16:15:00Z","modified":"2026-01-26T09:33:17.814056Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-30630","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T00:00:00Z","modified":"2026-11-08T10:45:10.986247343Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-08T11:04:08.386699Z"},{"id":"DEBIAN-CVE-2023-30630","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T16:15:07.93Z","modified":"2026-10-26T18:02:25.80600115Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1264","title":"dmidecode security update","description":"Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard (see a sample output). This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as a lot of other details of varying level of interest and reliability depending on the manufacturer. This will often include usage status for the CPU sockets, expansion slots (e.g. AGP, PCI, ISA) and memory module slots, and the list of I/O ports (e.g. serial, parallel, USB).DMI data can be used to enable or disable specific portions of kernel code depending on the specific hardware. Thus, one use of dmidecode is for kernel developers to detect system \"signatures\" and add them to the kernel source code when needed.\r\n\r\nSecurity Fix(es):\r\n\r\nDmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.(CVE-2023-30630)","status":"published","published":"2023-04-28T11:05:44Z","modified":"2026-08-18T01:17:41.230072965Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:5061","title":"Red Hat Security Advisory: dmidecode security update","status":"published","published":"2024-09-16T12:52:13Z","modified":"2026-05-01T10:34:09.39047Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:5252","title":"Red Hat Security Advisory: dmidecode security update","status":"published","published":"2024-09-16T12:52:23Z","modified":"2026-05-01T10:33:43.542181Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"UBUNTU-CVE-2023-30630","description":"Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).","status":"published","published":"2023-04-13T16:15:00Z","modified":"2026-10-17T12:56:07.154456516Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:5061","title":"Moderate: dmidecode security update","description":"The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.\n\nSecurity Fix(es):\n\n* dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-12T00:00:00Z","modified":"2026-10-29T11:31:30.630043779Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"ALSA-2023:5252","title":"Moderate: dmidecode security update","description":"The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.\n\nSecurity Fix(es):\n\n* dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-19T00:00:00Z","modified":"2026-10-29T11:02:26.86651096Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2025-1755004236","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: do not let --dump-bin overwrite an existing file","status":"published","published":"2025-08-12T13:10:40Z","modified":"2026-06-01T00:33:12.512045189Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755008582","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: do not let --dump-bin overwrite an existing file","status":"published","published":"2025-08-12T14:23:06Z","modified":"2026-06-01T00:33:14.188228542Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755271152","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: prevent --dump-bin from overwriting local files to\n  address privilege escalation vulnerability","status":"published","published":"2025-08-15T15:19:16Z","modified":"2026-06-01T00:33:25.93340777Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1755271747","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: prevent --dump-bin from overwriting local files to\n  address privilege escalation vulnerability","status":"published","published":"2025-08-15T15:29:11Z","modified":"2026-06-01T00:33:16.68196722Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1758228073","title":"Fix CVE(s): CVE-2023-30630","description":"   * SECURITY UPDATE: Overwrite a local file\n     - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting\n       local files to address privilege escalation vulnerability\n     - CVE-2023-30630","status":"published","published":"2025-09-18T20:41:16Z","modified":"2026-06-04T10:04:30.820138Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758228143","title":"Fix CVE(s): CVE-2023-30630","description":"   * SECURITY UPDATE: Overwrite a local file\n     - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting\n       local files to address privilege escalation vulnerability\n     - CVE-2023-30630","status":"published","published":"2025-09-18T20:42:27Z","modified":"2026-06-04T10:04:15.498324Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1762449077","title":"Fix CVE(s): CVE-2023-30630","description":"   * SECURITY UPDATE: Overwrite a local file\n     - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting\n       local files to address privilege escalation vulnerability\n     - CVE-2023-30630","status":"published","published":"2025-11-06T17:11:23Z","modified":"2026-06-04T10:04:08.594806Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1777040413","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: do not let --dump-bin overwrite an existing file","status":"published","published":"2026-04-24T14:20:18Z","modified":"2026-06-01T00:33:14.387828059Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777538564","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: do not let --dump-bin overwrite an existing file","status":"published","published":"2026-04-30T08:42:49Z","modified":"2026-06-01T00:33:27.253060378Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777996005","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: do not let --dump-bin overwrite an existing file","status":"published","published":"2026-05-05T15:46:55Z","modified":"2026-06-01T00:33:28.273138836Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1777996588","title":"dmidecode: Fix of CVE-2023-30630","description":"- CVE-2023-30630: do not let --dump-bin overwrite an existing file","status":"published","published":"2026-05-06T06:14:17Z","modified":"2026-06-01T00:33:18.817702853Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"MGASA-2023-0180","title":"Updated dmidecode packages fix security vulnerability","description":"Dmidecode allows -dump-bin to overwrite a local file. This has security\nrelevance because, for example, execution of Dmidecode via Sudo is\nplausible. (CVE-2023-30630)\n","status":"published","published":"2023-05-21T08:42:44Z","modified":"2026-04-16T04:41:27.703530061Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"RLSA-2023:5061","title":"Moderate: dmidecode security update","description":"The dmidecode packages provide utilities for extracting Intel 64 and Intel Itanium hardware information from the system BIOS or Extensible Firmware Interface (EFI), depending on the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, and asset tag, as well as other details, depending on the manufacturer.\n\nSecurity Fix(es):\n\n* dmidecode: dump-bin to overwrite a local file (CVE-2023-30630)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-09-26T13:26:39.659174Z","modified":"2026-02-04T16:30:19.886542Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:1947-1","title":"Security update for dmidecode","description":"This update for dmidecode fixes the following issues:\n\n- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).\n","status":"published","published":"2023-04-21T12:14:44Z","modified":"2026-02-04T04:01:18.595572Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2044-1","title":"Security update for dmidecode","description":"This update for dmidecode fixes the following issues:\n\n- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).\n","status":"published","published":"2023-04-26T12:48:13Z","modified":"2026-02-04T03:40:18.399981Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2215-1","title":"Security update for dmidecode","description":"This update for dmidecode fixes the following issues:\n\n- CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).\n","status":"published","published":"2023-05-16T09:25:22Z","modified":"2026-02-04T02:15:19.191953Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}