GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:21015-1

Vulnerability from csaf_opensuse - Published: 2026-06-22 14:30 - Updated: 2026-09-16 21:40
Summary
Security update for dnsdist
Severity
Moderate
Notes
Title of the patch: Security update for dnsdist
Description of the patch: This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content (bsc#1261236). - CVE-2026-0397: CORS misconfiguration can lead to information disclosure (bsc#1261237). - CVE-2026-24028: crafted DNS response packet can lead to an out-of-bounds read (bsc#1261238). - CVE-2026-24029: HTTPS ACL bypass can allow clients to send DoH queries (bsc#1261239). - CVE-2026-24030: allocating too much memory while processing DNS can result in a denial of service (bsc#1261240). - CVE-2026-27853: crafted DNS responses can lead to an out-of-bounds write (bsc#1261241). - CVE-2026-27854: crafted DNS queries can be used to trigger a use-after-free (bsc#1261243). - CVE-2026-33254: Resource exhaustion via DoQ/DoH3 connections (bsc#1262538). - CVE-2026-33257: Insufficient input validation of internal webserver (bsc#1262536). - CVE-2026-33260: Insufficient input validation of internal webserver (bsc#1262537). - CVE-2026-33593: Denial of service via crafted DNSCrypt query (bsc#1262546). - CVE-2026-33594: Outgoing DoH excessive memory allocation (bsc#1262545). - CVE-2026-33595: DoQ/DoH3 excessive memory allocation (bsc#1262544). - CVE-2026-33596: TCP backend stream ID overflow (bsc#1262543). - CVE-2026-33597: PRSD detection denial of service (bsc#1262542). - CVE-2026-33598: Out-of-bounds read in cache inspection via Lua (bsc#1262541). - CVE-2026-33599: Out-of-bounds read in service discovery (bsc#1262540). - CVE-2026-33602: Off-by-one access when processing crafted UDP responses (bsc#1262539). Changes for dnsdist: - Updated to 1.9.13
Patchnames: openSUSE-Leap-16.0-1027
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-0396
3.1 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2026-0397
3.1 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact low
CVE-2026-24028
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-24029
4.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-24030
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-27853
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-27854
4.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-33254
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
CVE-2026-33257
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-33260
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-33593
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
CVE-2026-33594
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
CVE-2026-33595
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
CVE-2026-33596
6.5 (Medium)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact moderate
CVE-2026-33597
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
CVE-2026-33598
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact critical
CVE-2026-33599
8.1 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
CVE-2026-33602
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
Recommended 4 products, the same list as for CVE-2026-0396
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1261236 self
https://bugzilla.suse.com/1261237 self
https://bugzilla.suse.com/1261238 self
https://bugzilla.suse.com/1261239 self
https://bugzilla.suse.com/1261240 self
https://bugzilla.suse.com/1261241 self
https://bugzilla.suse.com/1261243 self
https://bugzilla.suse.com/1262536 self
https://bugzilla.suse.com/1262537 self
https://bugzilla.suse.com/1262538 self
https://bugzilla.suse.com/1262539 self
https://bugzilla.suse.com/1262540 self
https://bugzilla.suse.com/1262541 self
https://bugzilla.suse.com/1262542 self
https://bugzilla.suse.com/1262543 self
https://bugzilla.suse.com/1262544 self
https://bugzilla.suse.com/1262545 self
https://bugzilla.suse.com/1262546 self
https://www.suse.com/security/cve/CVE-2026-0396/ self
https://www.suse.com/security/cve/CVE-2026-0397/ self
https://www.suse.com/security/cve/CVE-2026-24028/ self
https://www.suse.com/security/cve/CVE-2026-24029/ self
https://www.suse.com/security/cve/CVE-2026-24030/ self
https://www.suse.com/security/cve/CVE-2026-27853/ self
https://www.suse.com/security/cve/CVE-2026-27854/ self
https://www.suse.com/security/cve/CVE-2026-33254/ self
https://www.suse.com/security/cve/CVE-2026-33257/ self
https://www.suse.com/security/cve/CVE-2026-33260/ self
https://www.suse.com/security/cve/CVE-2026-33593/ self
https://www.suse.com/security/cve/CVE-2026-33594/ self
https://www.suse.com/security/cve/CVE-2026-33595/ self
https://www.suse.com/security/cve/CVE-2026-33596/ self
https://www.suse.com/security/cve/CVE-2026-33597/ self
https://www.suse.com/security/cve/CVE-2026-33598/ self
https://www.suse.com/security/cve/CVE-2026-33599/ self
https://www.suse.com/security/cve/CVE-2026-33602/ self
https://www.suse.com/security/cve/CVE-2026-0396 external
https://bugzilla.suse.com/1261236 external
https://www.suse.com/security/cve/CVE-2026-0397 external
https://bugzilla.suse.com/1261237 external
https://www.suse.com/security/cve/CVE-2026-24028 external
https://bugzilla.suse.com/1261238 external
https://www.suse.com/security/cve/CVE-2026-24029 external
https://bugzilla.suse.com/1261239 external
https://www.suse.com/security/cve/CVE-2026-24030 external
https://bugzilla.suse.com/1261240 external
https://www.suse.com/security/cve/CVE-2026-27853 external
https://bugzilla.suse.com/1261241 external
https://www.suse.com/security/cve/CVE-2026-27854 external
https://bugzilla.suse.com/1261243 external
https://www.suse.com/security/cve/CVE-2026-33254 external
https://bugzilla.suse.com/1262538 external
https://www.suse.com/security/cve/CVE-2026-33257 external
https://bugzilla.suse.com/1262536 external
https://www.suse.com/security/cve/CVE-2026-33260 external
https://bugzilla.suse.com/1262537 external
https://www.suse.com/security/cve/CVE-2026-33593 external
https://bugzilla.suse.com/1262546 external
https://www.suse.com/security/cve/CVE-2026-33594 external
https://bugzilla.suse.com/1262545 external
https://www.suse.com/security/cve/CVE-2026-33595 external
https://bugzilla.suse.com/1262544 external
https://www.suse.com/security/cve/CVE-2026-33596 external
https://bugzilla.suse.com/1262543 external
https://www.suse.com/security/cve/CVE-2026-33597 external
https://bugzilla.suse.com/1262542 external
https://www.suse.com/security/cve/CVE-2026-33598 external
https://bugzilla.suse.com/1262541 external
https://www.suse.com/security/cve/CVE-2026-33599 external
https://bugzilla.suse.com/1262540 external
https://www.suse.com/security/cve/CVE-2026-33602 external
https://bugzilla.suse.com/1262539 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for dnsdist",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for dnsdist fixes the following issues\n\n- CVE-2026-0396: crafted DNS queries can allow to inject HTML content (bsc#1261236).\n- CVE-2026-0397: CORS misconfiguration can lead to information disclosure (bsc#1261237).\n- CVE-2026-24028: crafted DNS response packet can lead to an out-of-bounds read (bsc#1261238).\n- CVE-2026-24029: HTTPS ACL bypass can allow clients to send DoH queries (bsc#1261239).\n- CVE-2026-24030: allocating too much memory while processing DNS can result in a denial of service (bsc#1261240).\n- CVE-2026-27853: crafted DNS responses can lead to an out-of-bounds write (bsc#1261241).\n- CVE-2026-27854: crafted DNS queries can be used to trigger a use-after-free (bsc#1261243).\n- CVE-2026-33254: Resource exhaustion via DoQ/DoH3 connections (bsc#1262538).\n- CVE-2026-33257: Insufficient input validation of internal webserver (bsc#1262536).\n- CVE-2026-33260: Insufficient input validation of internal webserver (bsc#1262537).\n- CVE-2026-33593: Denial of service via crafted DNSCrypt query (bsc#1262546).\n- CVE-2026-33594: Outgoing DoH excessive memory allocation (bsc#1262545).\n- CVE-2026-33595: DoQ/DoH3 excessive memory allocation (bsc#1262544).\n- CVE-2026-33596: TCP backend stream ID overflow (bsc#1262543).\n- CVE-2026-33597: PRSD detection denial of service (bsc#1262542).\n- CVE-2026-33598: Out-of-bounds read in cache inspection via Lua (bsc#1262541).\n- CVE-2026-33599: Out-of-bounds read in service discovery (bsc#1262540).\n- CVE-2026-33602: Off-by-one access when processing crafted UDP responses (bsc#1262539).\n\nChanges for dnsdist:\n\n- Updated to 1.9.13\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-1027",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21015-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261236",
        "url": "https://bugzilla.suse.com/1261236"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261237",
        "url": "https://bugzilla.suse.com/1261237"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261238",
        "url": "https://bugzilla.suse.com/1261238"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261239",
        "url": "https://bugzilla.suse.com/1261239"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261240",
        "url": "https://bugzilla.suse.com/1261240"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261241",
        "url": "https://bugzilla.suse.com/1261241"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261243",
        "url": "https://bugzilla.suse.com/1261243"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262536",
        "url": "https://bugzilla.suse.com/1262536"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262537",
        "url": "https://bugzilla.suse.com/1262537"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262538",
        "url": "https://bugzilla.suse.com/1262538"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262539",
        "url": "https://bugzilla.suse.com/1262539"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262540",
        "url": "https://bugzilla.suse.com/1262540"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262541",
        "url": "https://bugzilla.suse.com/1262541"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262542",
        "url": "https://bugzilla.suse.com/1262542"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262543",
        "url": "https://bugzilla.suse.com/1262543"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262544",
        "url": "https://bugzilla.suse.com/1262544"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262545",
        "url": "https://bugzilla.suse.com/1262545"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262546",
        "url": "https://bugzilla.suse.com/1262546"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-0396 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-0396/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-0397 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-0397/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24028 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24028/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24029 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24029/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-24030 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-24030/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27853 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27854 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27854/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33254 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33254/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33257 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33257/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33260 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33260/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33593 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33593/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33594 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33594/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33595 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33595/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33596 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33596/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33597 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33597/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33598 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33598/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33599 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33599/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33602 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33602/"
      }
    ],
    "title": "Security update for dnsdist",
    "tracking": {
      "current_release_date": "2026-09-16T21:40:36Z",
      "generator": {
        "date": "2026-06-22T14:30:36Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21015-1",
      "initial_release_date": "2026-06-22T14:30:36Z",
      "revision_history": [
        {
          "date": "2026-06-22T14:30:36Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:38:04Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:40:36Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.13-160000.1.1.aarch64",
                "product": {
                  "name": "dnsdist-1.9.13-160000.1.1.aarch64",
                  "product_id": "dnsdist-1.9.13-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.13-160000.1.1?arch=aarch64\u0026upstream=dnsdist-1.9.13-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.13-160000.1.1.ppc64le",
                "product": {
                  "name": "dnsdist-1.9.13-160000.1.1.ppc64le",
                  "product_id": "dnsdist-1.9.13-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.13-160000.1.1?arch=ppc64le\u0026upstream=dnsdist-1.9.13-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.13-160000.1.1.s390x",
                "product": {
                  "name": "dnsdist-1.9.13-160000.1.1.s390x",
                  "product_id": "dnsdist-1.9.13-160000.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.13-160000.1.1?arch=s390x\u0026upstream=dnsdist-1.9.13-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.13-160000.1.1.x86_64",
                "product": {
                  "name": "dnsdist-1.9.13-160000.1.1.x86_64",
                  "product_id": "dnsdist-1.9.13-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.13:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.13-160000.1.1?arch=x86_64\u0026upstream=dnsdist-1.9.13-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.13-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64"
        },
        "product_reference": "dnsdist-1.9.13-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.13-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le"
        },
        "product_reference": "dnsdist-1.9.13-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.13-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x"
        },
        "product_reference": "dnsdist-1.9.13-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.13-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        },
        "product_reference": "dnsdist-1.9.13-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-0396",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-0396"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleFFI.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-0396",
          "url": "https://www.suse.com/security/cve/CVE-2026-0396"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261236 for CVE-2026-0396",
          "url": "https://bugzilla.suse.com/1261236"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-0396"
    },
    {
      "cve": "CVE-2026-0397",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-0397"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-0397",
          "url": "https://www.suse.com/security/cve/CVE-2026-0397"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261237 for CVE-2026-0397",
          "url": "https://bugzilla.suse.com/1261237"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-0397"
    },
    {
      "cve": "CVE-2026-24028",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24028"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24028",
          "url": "https://www.suse.com/security/cve/CVE-2026-24028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261238 for CVE-2026-24028",
          "url": "https://bugzilla.suse.com/1261238"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-24028"
    },
    {
      "cve": "CVE-2026-24029",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24029"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24029",
          "url": "https://www.suse.com/security/cve/CVE-2026-24029"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261239 for CVE-2026-24029",
          "url": "https://bugzilla.suse.com/1261239"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-24029"
    },
    {
      "cve": "CVE-2026-24030",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-24030"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-24030",
          "url": "https://www.suse.com/security/cve/CVE-2026-24030"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261240 for CVE-2026-24030",
          "url": "https://bugzilla.suse.com/1261240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-24030"
    },
    {
      "cve": "CVE-2026-27853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27853",
          "url": "https://www.suse.com/security/cve/CVE-2026-27853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261241 for CVE-2026-27853",
          "url": "https://bugzilla.suse.com/1261241"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27853"
    },
    {
      "cve": "CVE-2026-27854",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27854"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code. In some cases DNSQuestion:getEDNSOptions might refer to a version of the DNS packet that has been modified, thus triggering a use-after-free and potentially a crash resulting in denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27854",
          "url": "https://www.suse.com/security/cve/CVE-2026-27854"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261243 for CVE-2026-27854",
          "url": "https://bugzilla.suse.com/1261243"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-27854"
    },
    {
      "cve": "CVE-2026-33254",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33254"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33254",
          "url": "https://www.suse.com/security/cve/CVE-2026-33254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262538 for CVE-2026-33254",
          "url": "https://bugzilla.suse.com/1262538"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33254"
    },
    {
      "cve": "CVE-2026-33257",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33257"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33257",
          "url": "https://www.suse.com/security/cve/CVE-2026-33257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262536 for CVE-2026-33257",
          "url": "https://bugzilla.suse.com/1262536"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33257"
    },
    {
      "cve": "CVE-2026-33260",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33260"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33260",
          "url": "https://www.suse.com/security/cve/CVE-2026-33260"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262537 for CVE-2026-33260",
          "url": "https://bugzilla.suse.com/1262537"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33260"
    },
    {
      "cve": "CVE-2026-33593",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33593"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33593",
          "url": "https://www.suse.com/security/cve/CVE-2026-33593"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262546 for CVE-2026-33593",
          "url": "https://bugzilla.suse.com/1262546"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33593"
    },
    {
      "cve": "CVE-2026-33594",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33594"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buffer that will not be released until the end of the connection.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33594",
          "url": "https://www.suse.com/security/cve/CVE-2026-33594"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262545 for CVE-2026-33594",
          "url": "https://bugzilla.suse.com/1262545"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33594"
    },
    {
      "cve": "CVE-2026-33595",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33595"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33595",
          "url": "https://www.suse.com/security/cve/CVE-2026-33595"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262544 for CVE-2026-33595",
          "url": "https://bugzilla.suse.com/1262544"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33595"
    },
    {
      "cve": "CVE-2026-33596",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33596"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DNS over TLS backend.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33596",
          "url": "https://www.suse.com/security/cve/CVE-2026-33596"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262543 for CVE-2026-33596",
          "url": "https://bugzilla.suse.com/1262543"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-33596"
    },
    {
      "cve": "CVE-2026-33597",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33597"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PRSD detection denial of service",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33597",
          "url": "https://www.suse.com/security/cve/CVE-2026-33597"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262542 for CVE-2026-33597",
          "url": "https://bugzilla.suse.com/1262542"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33597"
    },
    {
      "cve": "CVE-2026-33598",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33598"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33598",
          "url": "https://www.suse.com/security/cve/CVE-2026-33598"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262541 for CVE-2026-33598",
          "url": "https://bugzilla.suse.com/1262541"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-33598"
    },
    {
      "cve": "CVE-2026-33599",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33599"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33599",
          "url": "https://www.suse.com/security/cve/CVE-2026-33599"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262540 for CVE-2026-33599",
          "url": "https://bugzilla.suse.com/1262540"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33599"
    },
    {
      "cve": "CVE-2026-33602",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33602"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
          "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33602",
          "url": "https://www.suse.com/security/cve/CVE-2026-33602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262539 for CVE-2026-33602",
          "url": "https://bugzilla.suse.com/1262539"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.aarch64",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.s390x",
            "openSUSE Leap 16.0:dnsdist-1.9.13-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-22T14:30:36Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33602"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.