CVE-2023-30630: nongnu dmidecode Relative Path Traversal

Vulnerability summary

CVE-2023-30630 is a high (CVSS 7.1) Relative Path Traversal vulnerability in nongnu dmidecode. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 43.6% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 13-04-2023
   PublishedVulnerability first disclosed.
2. 04-03-2025
   Last modifiedVulnerability information updated.

Description

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed patch prevents dmidecode from writing to an existing file. However, there are multiple attack vectors that would not require overwriting an existing file that would provide the same level of unauthorized privilege escalation (e.g. creating a new file in /etc/cron.hourly).

• CWE-23Relative Path TraversalThe product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.