CVE-2023-30630

highPriorität · verfolgen · 28EPSS 0.005 · 43. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.51% (43rd) EPSS

CVSS 7.1 · high

Is it mine?

74 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobendmidecode-1:3.3-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-1:3.3-7.el9_2.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-1:3.3-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-debuginfo-1:3.3-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-debuginfo-1:3.3-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-debugsource-1:3.3-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-debugsource-1:3.3-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5061
Behobendmidecode-1:3.3-4.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Behobendmidecode-1:3.3-4.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Behobendmidecode-1:3.3-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Behobendmidecode-debuginfo-1:3.3-4.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Behobendmidecode-debuginfo-1:3.3-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Behobendmidecode-debugsource-1:3.3-4.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Behobendmidecode-debugsource-1:3.3-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:5252
Workarounddmidecode-1:3.3-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-1:3.3-7.el9_2.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-1:3.3-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debuginfo-1:3.3-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debuginfo-1:3.3-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debugsource-1:3.3-7.el9_2.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debugsource-1:3.3-7.el9_2.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-1:3.3-4.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-1:3.3-4.el8_8.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-1:3.3-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debuginfo-1:3.3-4.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debuginfo-1:3.3-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debugsource-1:3.3-4.el8_8.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.
Workarounddmidecode-debugsource-1:3.3-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf
Do not configure sudoers file to allow running dmidecode with elevated privileges.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.5–7.1

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.2

v3.17.1highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondary · ENISA EU

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HsecondaryAusnutzbarkeit 1.8 · Auswirkung 5.2

v3.16.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondary · Red Hat Product Security US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-23USCWE-269USCWE-269US

betroffene Produkte (74)

Betroffene Produkte und Versionsbereiche.

Dell ECS <3.8.1.0alle Versionencert_bundDE
Dell PowerEdgealle Versionencert_bundDEcpe:/h:dell:poweredge:-
IBM InfoSphere Information Serveralle Versionencert_bundDEcpe:/a:ibm:infosphere_information_server:-
Dell ECS< 3.8.1.0cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
Novell Inc. OpenSUSE Leap≤ 15.4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP1fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP5fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP5fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 15 SP3fstec_bduRU
Novell Inc. SUSE Linux Enterprise Server for SAP Applications≤ 12 SP3fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP1fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP4fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP5fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP2fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 15 SP3fstec_bduRU

20 von 74 angezeigt

Advisories (6)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2023:5061Red Hat Security Advisory: dmidecode security update2023-09-12csaf · redhat_csafUS
An update for dmidecode is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2023:5252Red Hat Security Advisory: dmidecode security update2023-09-19csaf · redhat_csafUS
An update for dmidecode is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2023-2320Red Hat Enterprise Linux(dmidecode): Schwachstelle ermöglicht CodeausführungDeutsch2023-09-12csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.
WID-SEC-W-2023-2902IBM Security Guardium: Mehrere SchwachstellenDeutsch2023-11-14csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.
WID-SEC-W-2024-0794Dell ECS: Mehrere SchwachstellenDeutsch2024-04-04csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
WID-SEC-W-2024-1591Juniper JUNOS: Mehrere SchwachstellenDeutsch2024-07-10csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund redhat_csaf NVD CVE.org MITRE

veröffentlicht 2023-04-13geändert 2026-09-23

Referenzen (17)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan