CVE-2015-5695

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-08-31 · updated 2026-06-17
Weakness: CWE-400

Description

Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.

Affected products

OpenStack Designate: 1.0.0.0b1, 1.0.0a0, 2015.1.0

References

http://lists.openstack.org/pipermail/openstack/2015-July/013548.html
http://www.openwall.com/lists/oss-security/2015/07/28/11
http://www.openwall.com/lists/oss-security/2015/07/29/6
https://bugs.launchpad.net/designate/+bug/1471161
https://bugzilla.redhat.com/show_bug.cgi?id=1245241
https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
http://lists.openstack.org/pipermail/openstack/2015-July/013548.html
http://www.openwall.com/lists/oss-security/2015/07/28/11
http://www.openwall.com/lists/oss-security/2015/07/29/6
https://bugs.launchpad.net/designate/+bug/1471161
https://bugzilla.redhat.com/show_bug.cgi?id=1245241
https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch

Get alerted when CVE-2015-5695 or the next vulnerability affects your stack