CVE-2023-30630

2023-04-1316:15:07

Alpine Linux Development Team

security.alpinelinux.org

cve-2023-30630

dmidecode

security relevance

local file overwrite

execution

sudo

unix

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

0.0004 Low

EPSS

Percentile

10.0%

JSON

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.

OSVersionArchitecturePackageVersionFilename
Alpine3.17-mainnoarchdmidecode= 3.4-r0UNKNOWN
Alpine3.16-mainnoarchdmidecode= 3.3-r1UNKNOWN
Alpine3.15-mainnoarchdmidecode= 3.3-r1UNKNOWN
Alpine3.14-mainnoarchdmidecode= 3.3-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.17-main	noarch	dmidecode	= 3.4-r0	UNKNOWN
Alpine	3.16-main	noarch	dmidecode	= 3.3-r1	UNKNOWN
Alpine	3.15-main	noarch	dmidecode	= 3.3-r1	UNKNOWN
Alpine	3.14-main	noarch	dmidecode	= 3.3-r0	UNKNOWN