2 matches found
SUSE CVE-2026-39956
jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to jvstringindexes without verifying they are strings, and jvstringindexes in src/jv.c relies solely on assert checks that are stripped in release builds compile...
5.5CVSS5.7AI score0.00174EPSS
SaveExploits1References8
ISC BIND Crafted ANY Request Response Multiple RRsets DoS
The version of BIND installed on the remote host suggests that it suffers from a denial of service vulnerability that could be triggered by sending a large volume of recursive queries that return multiple RRsets in the answer section, triggering assertion checks. To be vulnerable you need to have...
4.3CVSS5.5AI score0.44395EPSS
SaveExploits1References2
20