CVE-2023-30630 Path traversal in n/a
Attackers can exploit dmidecode's dump-bin feature to overwrite or create files, potentially leading to privilege escalation when run with sudo.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-30630?
CVE-2023-30630 is a high-severity path traversal vulnerability in n/a, published on 13 Apr 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).
Weakness: CWE-23
Which versions are affected by CVE-2023-30630?
It affects 1 product.
Linux distribution packages (39)
dmidecode AlmaLinux:8 | All versions | 1:3.3-4.el8_8.1 |
dmidecode AlmaLinux:9 | All versions | 1:3.3-7.el9_2.1 |
dmidecode Red Hat:enterprise_linux:8::baseos | All versions | 1:3.3-4.el8_8.1 |
dmidecode-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 1:3.3-4.el8_8.1 |
dmidecode-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 1:3.3-4.el8_8.1 |
dmidecode Red Hat:enterprise_linux:9::baseos | All versions | 1:3.3-7.el9_2.1 |
dmidecode-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 1:3.3-7.el9_2.1 |
dmidecode-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 1:3.3-7.el9_2.1 |
dmidecode Rocky Linux:9 | All versions | 1:3.3-7.el9_2.1 |
dmidecode SUSE:Enterprise Storage 7 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Enterprise Storage 7.1 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Micro 5.1 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Micro 5.2 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Micro 5.3 | All versions | 3.4-150400.16.8.1 |
dmidecode SUSE:Linux Enterprise Micro 5.4 | All versions | 3.4-150400.16.8.1 |
dmidecode SUSE:Linux Enterprise Module for Basesystem 15 SP4 | All versions | 3.4-150400.16.8.1 |
dmidecode SUSE:Linux Enterprise Real Time 15 SP3 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 3.0-10.6.1 |
dmidecode SUSE:Linux Enterprise Server 12 SP4-ESPOS | All versions | 3.0-10.6.1 |
dmidecode SUSE:Linux Enterprise Server 12 SP4-LTSS | All versions | 3.0-10.6.1 |
dmidecode SUSE:Linux Enterprise Server 12 SP5 | All versions | 3.0-10.6.1 |
dmidecode SUSE:Linux Enterprise Server 15 SP1-LTSS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Server 15 SP2-LTSS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Server 15 SP3-LTSS | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 3.0-10.6.1 |
dmidecode SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 3.0-10.6.1 |
dmidecode SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Manager Proxy 4.2 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:Manager Server 4.2 | All versions | 3.2-150100.9.16.1 |
dmidecode SUSE:OpenStack Cloud 9 | All versions | 3.0-10.6.1 |
dmidecode SUSE:OpenStack Cloud Crowbar 9 | All versions | 3.0-10.6.1 |
dmidecode openSUSE:Leap 15.4 | All versions | 3.4-150400.16.8.1 |
dmidecode openSUSE:Leap Micro 5.3 | All versions | 3.4-150400.16.8.1 |
Products include Nongnu Dmidecode.
How do I fix CVE-2023-30630?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-30630 being exploited?
There is no known exploitation of CVE-2023-30630 in the wild and no public exploit code.
Sources
Also known as ALSA-2023:5061, ALSA-2023:5252, AZL-26138, BELL-CVE-2023-30630, CLSA-2025-1755004236, CLSA-2025-1755008582 and 21 more.