CVE-2015-5695: Medium severity openstack designate vulnerability
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5695?
CVE-2015-5695 has a high severity level due to its potential to cause a denial of service via an infinite loop.
How do I fix CVE-2015-5695?
To fix CVE-2015-5695, upgrade to a version of OpenStack Designate that enforces RecordSets per domain and quota limits.
What versions are affected by CVE-2015-5695?
CVE-2015-5695 affects OpenStack Designate versions 2015.1.0 through 1.0.0.0b1.
What impacts does CVE-2015-5695 have on OpenStack users?
CVE-2015-5695 could allow remote attackers to exploit the vulnerability causing service interruptions for OpenStack users.
Is there a workaround for CVE-2015-5695?
A temporary workaround for CVE-2015-5695 includes disabling zone file transfers until the vulnerability is patched.