Lucene search
+L

24 matches found

RedHat Linux
RedHat Linux
•added 2026/08/31 2:51 a.m.•34 views

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.6AI score0.00348EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/08/31 2:49 a.m.•15 views

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.6AI score0.00348EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/08/25 7:58 p.m.•20 views

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.6AI score0.00348EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/08/25 3:20 p.m.•12 views

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.6AI score0.00348EPSS
SaveExploits0References5
Oracle linux
Oracle linux
•added 2026/08/18 12:00 a.m.•32 views

sg3_utils security, bug fix, and enhancement update

1.44-6.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188162...

7.6CVSS5.9AI score0.00348EPSS
SaveExploits0
osv_rlsa
osv_rlsa
•added 2026/08/06 12:04 a.m.•25 views

RLSA-2026:50141 Important: sg3_utils security, bug fix, and enhancement update

The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes: sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output...

7.6CVSS6.3AI score0.00348EPSS
SaveExploits0References2
Oracle linux
Oracle linux
•added 2026/08/04 12:00 a.m.•25 views

sg3_utils security, bug fix, and enhancement update

1.47-10.1 - sginq output conformance for SCSI name string and ATA fields RHEL-188130...

7.6CVSS5.9AI score0.00348EPSS
SaveExploits0
Mend
Mend
•added 2026/07/28 4:47 p.m.•9 views

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

8.6CVSS6.6AI score0.00348EPSS
SaveExploits0References22
RedhatCVE
RedhatCVE
•added 2026/07/28 4:47 p.m.•20 views

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

7.6CVSS6.7AI score0.00348EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/07/02 12:00 a.m.•30 views

SUSE SLED15 / SLES15 Security Update : sg3_utils (SUSE-SU-2026:2688-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2688-1 advisory. This update for sg3utils fixes the following issue - sginq: --export output conformance for SCSI name string and ATA...

6AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/06/30 8:22 a.m.•23 views

Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.44763+23.769c9b5b: sginq: --export output conformance for SCSI name string and ATA fields bsc1267823. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

5.8AI score
SaveExploits0References2
osv_suse
osv_suse
•added 2026/06/30 8:22 a.m.•24 views

SUSE-SU-2026:2690-1 Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.44763+23.769c9b5b: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.8AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/06/30 8:21 a.m.•27 views

Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.43+49.47792c16: sginq: --export output conformance for SCSI name string and ATA fields bsc1267823. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

5.8AI score
SaveExploits0References2
osv_suse
osv_suse
•added 2026/06/30 8:21 a.m.•33 views

SUSE-SU-2026:2689-1 Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.43+49.47792c16: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.8AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2026/06/30 8:21 a.m.•18 views

Security update for sg3_utils

This update for sg3utils fixes the following issue sginq: --export output conformance for SCSI name string and ATA fields bsc1267823. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

5.8AI score
SaveExploits0References2
osv_suse
osv_suse
•added 2026/06/30 8:20 a.m.•30 views

SUSE-SU-2026:2687-1 Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.44763+20.e416e091: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•7 views

PT-2026-57134

This update for sg3 utils fixes the following issue - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•7 views

PT-2026-57133

This update for sg3 utils fixes the following issue Update to version 1.44763+20.e416e091: - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•6 views

PT-2026-57137

This update for sg3 utils fixes the following issue Update to version 1.47+16.aad0b411: - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.9AI score
SaveExploits0References3
osv_suse
osv_suse
•added 2026/06/26 9:22 a.m.•25 views

SUSE-SU-2026:22429-1 Security update for sg3_utils

This update for sg3utils fixes the following issue - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder