VYPR

rpm package

almalinux/dmidecode

pkg:rpm/almalinux/dmidecode

Vulnerabilities (1)

  • CVE-2023-30630HigApr 13, 2023
    affected < 1:3.3-7.el9_2.1fixed 1:3.3-7.el9_2.1

    Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is t