AZL-26138 CVE-2023-30630 affecting package dmidecode for versions less than 3.5-1

🗓️ 13 Apr 2023 16:15:07Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

Dmidecode before 3.5-1 allows -dump-bin to overwrite local files, enabling privilege escalation.

Reporter	Title	Published	Views	Family All 122
IBM Security Bulletins	Security Bulletin: TSSC/IMC is vulnerable to aritrary code excecution due to curl (CVE-2023-27536, CVE-2023-28321)	8 Jul 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC is vulnerable to aritrary code excecution due to Dmidecode (CVE-2023-30630)	20 Jun 202421:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	26 Mar 202504:12	–	ibm
Tenable Nessus	Amazon Linux 2023 : dmidecode (ALAS2023-2023-328)	8 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : dmidecode (ALAS-2024-2395)	9 Jan 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0121: dmidecode (ALINUX3-SA-2023:0121)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : dmidecode (ALSA-2023:5061)	14 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : dmidecode (ALSA-2023:5252)	22 Sep 202300:00	–	nessus
Tenable Nessus	CentOS 8 : dmidecode (CESA-2023:5252)	8 Feb 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : dmidecode (EulerOS-SA-2023-2309)	9 Jul 202300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30630

21 Apr 2026 04:23Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.1

EPSS0.00047

dmidecode privilege escalation dump-bin overwrite local file overwrite cron files vulnerability