Debian/sg3-utils: high 7.6
A flaw was found in sg3_utils. The sg_inq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline
Action: Upgrade sg3-utils to 1.48-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.48-4 | - |
Fixed versions
| 1.48-4 |
Sources
- osv: DEBIAN-CVE-2026-16313#Debian:14/sg3-utils
- https://security-tracker.debian.org/tracker/CVE-2026-16313
published · modified · JSON