{"id":"CVE-2026-16313","aliases":["ALSA-2026:50141","ALSA-2026:50142","ALSA-2026:56130","AZL-94311","CLSA-2026-1786698186","CLSA-2026-1788364105","DEBIAN-CVE-2026-16313","EUVD-2026-49906","GHSA-wqmp-fw94-rpg4","OESA-2026-3244","RHSA-2026:50141","RHSA-2026:50142","RHSA-2026:56130","RHSA-2026:59397","RHSA-2026:59555","RHSA-2026:59567","RHSA-2026:59568","RHSA-2026:61260","RHSA-2026:61261","RHSA-2026:67157","RHSA-2026:69124","RLSA-2026:50141","RLSA-2026:50142","RLSA-2026:56130","UBUNTU-CVE-2026-16313","USN-8874-1"],"status":"published","title":"Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00348,"percentile":0.28867,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-93"],"published":"2026-07-28T16:47:06Z","modified":"2026-11-11T12:40:47Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"sg3_utils","fixed_in":["1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"sg3_utils-devel","fixed_in":["1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"sg3_utils-libs","fixed_in":["1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"sg3_utils","fixed_in":["1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"sg3_utils-devel","fixed_in":["1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"sg3_utils-libs","fixed_in":["1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"sg3_utils","fixed_in":["1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"sg3_utils-devel","fixed_in":["1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"sg3_utils-libs","fixed_in":["1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sg3_utils","fixed_in":["1.47-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sg3_utils-devel","fixed_in":["1.47-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"sg3_utils-libs","fixed_in":["1.47-10.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sg3_utils","fixed_in":["1.47-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sg3_utils-devel","fixed_in":["1.47-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sg3_utils-libs","fixed_in":["1.47-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sg3-utils","fixed_in":["1.48-4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"sg3_utils","fixed_in":["1.48-4.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"sg3_utils","fixed_in":["1.48-4.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"sg3_utils","fixed_in":["1.45-14.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"sg3_utils","fixed_in":["1.46-10.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"sg3_utils","fixed_in":["1.48-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-libs","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-debuginfo","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-debugsource","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-devel","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-debuginfo","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-debugsource","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-libs","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-devel","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-debugsource","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-devel","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-libs","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-debuginfo","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-debugsource","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-devel","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.47-10.el9_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-5.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-5.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-libs","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.44-6.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils","fixed_in":["0:1.47-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.47-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.47-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-libs","fixed_in":["0:1.47-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.47-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils","fixed_in":["0:1.47-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-debuginfo","fixed_in":["0:1.47-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-debugsource","fixed_in":["0:1.47-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-libs","fixed_in":["0:1.47-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.47-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils","fixed_in":["1:1.37-20.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils-debuginfo","fixed_in":["1:1.37-20.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils-libs","fixed_in":["1:1.37-20.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils-devel","fixed_in":["1:1.37-20.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils","fixed_in":["0:1.48-7.el10_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-debuginfo","fixed_in":["0:1.48-7.el10_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-debugsource","fixed_in":["0:1.48-7.el10_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-libs","fixed_in":["0:1.48-7.el10_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-libs-debuginfo","fixed_in":["0:1.48-7.el10_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-devel","fixed_in":["0:1.48-7.el10_0.2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"sg3_utils","fixed_in":["0:1.47-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"sg3_utils","fixed_in":["0:1.48-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"sg3_utils","fixed_in":["0:1.44-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sg3-utils","fixed_in":["1.36-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sg3-utils","fixed_in":["1.40-0ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sg3-utils","fixed_in":["1.42-2ubuntu1.18.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sg3-utils","fixed_in":["1.44-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"sg3-utils","fixed_in":["1.46-1ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"sg3-utils","fixed_in":["1.46-3ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"sg3-utils","fixed_in":["1.48-3ubuntu5"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"sg3-utils","fixed_in":["1.48-3ubuntu3.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.48-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-10.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.46-3","1.46-3.1","1.48-1","1.48-2","1.48-3","1.48-3~deb13u1","1.48-4"]},{"source":"osv","ecosystem":"Debian:13","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.48-2","1.48-3","1.48-3~deb13u1","1.48-4"]},{"source":"osv","ecosystem":"Debian:14","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-4"}]}],"versions":["1.48-2","1.48-3","1.48-3~deb13u1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-4.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-4.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45-14.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46-10.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-5.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37-20.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37-20.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37-20.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37-20.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"sg3_utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_0.2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.47-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.48-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"sg3_utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-1ubuntu1+esm1"}]}],"versions":["1.36-1","1.36-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40-0ubuntu1+esm1"}]}],"versions":["1.40-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42-2ubuntu1.18.04.2+esm1"}]}],"versions":["1.42-2ubuntu1","1.42-2ubuntu1.18.04.1","1.42-2ubuntu1.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44-1ubuntu2+esm1"}]}],"versions":["1.44-1ubuntu1","1.44-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46-1ubuntu0.22.04.2"}]}],"versions":["1.45-1ubuntu2","1.45-1ubuntu3","1.46-1","1.46-1build1","1.46-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46-3ubuntu4.1"}]}],"versions":["1.46-3ubuntu2","1.46-3ubuntu3","1.46-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-3ubuntu5"}]}],"versions":["1.48-3ubuntu3","1.48-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-3ubuntu3.2"}]}],"versions":["1.48-2ubuntu1","1.48-3ubuntu1","1.48-3ubuntu2","1.48-3ubuntu3","1.48-3ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-1ubuntu1+esm1"}]}],"versions":["1.36-1","1.36-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40-0ubuntu1+esm1"}]}],"versions":["1.40-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42-2ubuntu1.18.04.2+esm1"}]}],"versions":["1.42-2ubuntu1","1.42-2ubuntu1.18.04.1","1.42-2ubuntu1.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44-1ubuntu2+esm1"}]}],"versions":["1.44-1ubuntu1","1.44-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46-1ubuntu0.22.04.2"}]}],"versions":["1.45-1ubuntu2","1.45-1ubuntu3","1.46-1","1.46-1build1","1.46-1ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.46-3ubuntu4.1"}]}],"versions":["1.46-3ubuntu2","1.46-3ubuntu3","1.46-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sg3-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-3ubuntu3.2"}]}],"versions":["1.48-2ubuntu1","1.48-3ubuntu1","1.48-3ubuntu2","1.48-3ubuntu3","1.48-3ubuntu3.1"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift container platform 4.20"},{"vendor":"red hat","product":"red hat openshift container platform 4.21"},{"vendor":"red hat","product":"red hat openshift container platform 4.22"},{"vendor":"red hat","product":"red hat openshift container platform 5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:50141","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:50142","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54769","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:56130","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59397","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59555","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59567","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59568","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61260","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61261","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63041","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63044","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63100","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65851","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65907","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67157","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67935","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69124","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70586","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95508","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95745","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:95755","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16313","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2502845","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/doug-gilbert/sg3_utils/pull/83","tags":["article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16313","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wqmp-fw94-rpg4"},{"url":"https://bugzilla.redhat.com/2502845","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-50141.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-50142.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-56130.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786698186.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1788364105.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-16313","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3244","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50141.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16313","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50142.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56130.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59397.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59555.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59567.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59568.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61260.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61261.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67157.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69124.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50141","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:50142","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:56130","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-16313","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8874-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-16313","title":"Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T16:47:06.471Z","modified":"2026-11-11T12:40:47.775Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-93"],"updated_at":"2026-11-11T13:28:05.136075Z"}],"euvd":[{"id":"EUVD-2026-49906","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T16:47:06Z","modified":"2026-11-11T12:40:47Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-11T14:28:59.314266Z"}],"ghsa":[{"id":"GHSA-wqmp-fw94-rpg4","title":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs...","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T18:33:03Z","modified":"2026-11-11T15:30:36Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-93"],"updated_at":"2026-11-11T15:34:47.187237Z"}],"nvd":[{"id":"CVE-2026-16313","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T17:16:37.807Z","modified":"2026-11-11T13:17:26.09Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-93"],"updated_at":"2026-11-11T15:25:14.400795Z"}],"osv":[{"id":"DEBIAN-CVE-2026-16313","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T17:16:37.807Z","modified":"2026-11-12T09:47:40.470139049Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T10:26:30.347596Z"},{"id":"OESA-2026-3244","title":"sg3_utils security update","description":"The sg3_utils package contains utilities that send SCSI commands to devices. As well as devices on transports traditionally associated with SCSI (e.g. Fibre Channel (FCP), Serial Attached SCSI (SAS) and the SCSI Parallel Interface(SPI)) many other devices use SCSI command sets. ATAPI cd/dvd drives and SATA disks that connect via a translation layer or a bridge device are examples of devices that use SCSI command sets.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.(CVE-2026-16313)","status":"published","published":"2026-08-07T02:41:42Z","modified":"2026-08-07T03:00:54.101830414Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:50141","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-08-05T10:37:30Z","modified":"2026-10-10T10:12:36Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:50142","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-08-05T10:37:31Z","modified":"2026-10-10T10:12:37Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:56130","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-08-19T10:22:54Z","modified":"2026-10-10T10:14:30Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:59397","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-08-26T10:18:11Z","modified":"2026-10-10T10:15:29Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59555","title":"Red Hat Security Advisory: sg3_utils security update","status":"published","published":"2026-08-26T10:18:18Z","modified":"2026-10-10T10:15:33Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59567","title":"Red Hat Security Advisory: sg3_utils security update","status":"published","published":"2026-08-26T10:18:21Z","modified":"2026-10-10T10:15:35Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:59568","title":"Red Hat Security Advisory: sg3_utils security update","status":"published","published":"2026-08-26T10:18:21Z","modified":"2026-10-10T10:15:36Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:61260","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-08-31T10:12:14Z","modified":"2026-10-10T10:15:59Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:61261","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-08-31T10:12:15Z","modified":"2026-10-10T10:16:00Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:67157","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-09-14T10:10:20Z","modified":"2026-10-10T10:17:59Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69124","title":"Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update","status":"published","published":"2026-09-21T10:14:55Z","modified":"2026-10-10T10:18:58Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:50141","title":"Important: sg3_utils security, bug fix, and enhancement update","description":"The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.\n\nSecurity Fix(es):\n\n* sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)\n\nBug Fix(es) and Enhancement(s):\n\n* sg_inq output conformance for SCSI name string and ATA fields [rhel-9.8.z] (JIRA:Rocky Linux-188130)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-06T00:04:37.258387Z","modified":"2026-08-06T00:30:07.855864846Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:50142","title":"Important: sg3_utils security, bug fix, and enhancement update","description":"The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.\n\nSecurity Fix(es):\n\n* sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)\n\nBug Fix(es) and Enhancement(s):\n\n* sg_inq output conformance for SCSI name string and ATA fields [rhel-10.2.z] (JIRA:Rocky Linux-188123)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-06T00:07:41.062944Z","modified":"2026-08-06T00:30:07.849754175Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:56130","title":"Important: sg3_utils security, bug fix, and enhancement update","description":"The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.\n\nSecurity Fix(es):\n\n* sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)\n\nBug Fix(es) and Enhancement(s):\n\n* sg_inq output conformance for SCSI name string and ATA fields [rhel-8.10.z] (JIRA:Rocky Linux-188162)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-19T06:01:07.331619Z","modified":"2026-08-19T06:30:05.628863852Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-16313","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T17:16:00Z","modified":"2026-10-17T12:58:06.376158087Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"ALSA-2026:50141","title":"Important: sg3_utils security, bug fix, and enhancement update","description":"The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.  \n\nSecurity Fix(es):  \n\n  * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * sg_inq output conformance for SCSI name string and ATA fields [almalinux-9.8.z] (JIRA:AlmaLinux-188130)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-04T00:00:00Z","modified":"2026-10-29T11:32:22.523643903Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:50142","title":"Important: sg3_utils security, bug fix, and enhancement update","description":"The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.  \n\nSecurity Fix(es):  \n\n  * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * sg_inq output conformance for SCSI name string and ATA fields [almalinux-10.2.z] (JIRA:AlmaLinux-188123)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-04T00:00:00Z","modified":"2026-10-29T11:30:37.554964542Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:56130","title":"Important: sg3_utils security, bug fix, and enhancement update","description":"The sg3_utils packages provide command-line utilities for devices that use the Small Computer System Interface (SCSI) command sets.  \n\nSecurity Fix(es):  \n\n  * sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export (CVE-2026-16313)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * sg_inq output conformance for SCSI name string and ATA fields [almalinux-8.10.z] (JIRA:AlmaLinux-188162)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-18T00:00:00Z","modified":"2026-10-29T11:02:28.908792079Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-94311","title":"CVE-2026-16313 affecting package sg3_utils 1.48-1","description":"A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev device database. This could allow an attacker who can present a crafted SCSI device to execute arbitrary commands as root when the device is disconnected.","status":"published","published":"2026-07-28T17:16:37Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.077208Z"},{"id":"CLSA-2026-1786698186","title":"sg3_utils: Fix of CVE-2026-16313","description":"- Fix CVE-2026-16313 - escape control characters in the VPD 0x83 SCSI name\n  string designator printed by sg_inq --export","status":"published","published":"2026-08-14T09:03:17Z","modified":"2026-10-26T09:31:25.604670916Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1788364105","title":"sg3_utils: Fix of CVE-2026-16313","description":"- CVE-2026-16313: escape udev non-conforming characters in the VPD 0x83 SCSI\n  name string designator and the T10 vendor ID ATA subfield printed by\n  sg_inq --export","status":"published","published":"2026-09-02T15:48:37Z","modified":"2026-10-26T09:30:43.804544135Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"USN-8874-1","title":"sg3-utils vulnerability","description":"Shaomin Chen discovered that sg3_utils did not properly sanitize device\nidentification data. An attacker could possibly use this issue to\nexecute arbitrary commands.","status":"published","published":"2026-10-06T10:20:19Z","modified":"2026-10-06T23:42:33.487694338Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}