Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-5695US | medium6.5 | — | ||
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file tr… | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.openstack.org/pipermail/openstack/2015-July/013548.htmlADVISORY
- http://www.openwall.com/lists/oss-security/2015/07/28/11WEB
- http://www.openwall.com/lists/oss-security/2015/07/29/6WEB
- https://bugs.launchpad.net/designate/+bug/1471161WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1245241REPORT
- https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patchWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan