Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-30630: Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | dmidecode | 1:3.2-5.amzn2.1.1 |
| Amazon Linux · 2 | dmidecode-debuginfo | 1:3.2-5.amzn2.1.1 |
Vulnerabilities 1
-
High 7.1
Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, exec…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-30630.html