CVE-2015-5695
- State
- Published
- Severity
- Not scored
- Published
- Aug 31, 2017
- Updated
- Aug 6, 2024
- Reserved
- Jul 28, 2015
Description
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1245241
- [oss-security] 20150729 Re: Re: CVE Request - OpenStack Designate mDNS DoS through incorrect handling of large RecordSetsmailing-list
- https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
- https://bugs.launchpad.net/designate/+bug/1471161
- [Openstack] 20150728 [Security][LP# 1471161] Designate mDNS DoS through incorrect handling of large RecordSetsmailing-list
- [oss-security] 20150728 Re: CVE Request - OpenStack Designate mDNS DoS through incorrect handling of large RecordSetsmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.