Privilege Escalation Vulnerability in Dmidecode Package
Summary
UBUNTU-CVE-2023-30630: Dmidecode before 3.5 allows -dump-bin to overwrite a local file. Affects dmidecode versions 2.12-2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Dmidecode is a tool for Linux systems that provides information about the hardware components of a computer by reading data from the system's BIOS. It is widely used for system diagnostics and hardware inventory. The package is crucial for system administrators and developers who need to gather hardware information. However, a vulnerability has been identified in versions prior to 3.5, which allows unauthorized file overwriting, potentially leading to privilege escalation.
Vulnerability Detail
The vulnerability in Dmidecode, identified as CVE-2023-30630, allows the '-dump-bin' option to overwrite local files. This can be exploited by users with sudo privileges to execute Dmidecode, leading to unauthorized privilege escalation. Although a patch was introduced in version 3.5, it has been reported that the fix does not fully address the issue, as it only prevents overwriting existing files while other attack vectors remain viable, such as creating new files in sensitive directories like /etc/cron.hourly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the '-dump-bin' option with Dmidecode until the package is updated to the patched version. Additionally, restricting access to the Dmidecode command for non-administrative users can help mitigate the risk.
Conclusion
The Dmidecode package has a significant vulnerability that can lead to privilege escalation if not addressed. Users are advised to update to the latest version to mitigate risks. Temporary workarounds are available, but the best course of action is to apply the patch as soon as possible.
See every vulnerability recorded for dmidecode →
FAQ
CVE-2023-30630 is a vulnerability in the Dmidecode package that allows unauthorized file overwriting, potentially leading to privilege escalation.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Versions of Dmidecode prior to 3.5 are affected by this vulnerability.
As a workaround, avoid using the '-dump-bin' option and restrict access to the Dmidecode command for non-administrative users.
The CVSS score for this vulnerability is 7.1, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for dmidecode.
