PyPI/designate CVE-2015-5695: medium 6.5, EPSS 2.15%
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2017-114
- https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
- https://bugzilla.redhat.com/show_bug.cgi?id=1245241
- https://bugs.launchpad.net/designate/+bug/1471161
- http://www.openwall.com/lists/oss-security/2015/07/29/6
- http://www.openwall.com/lists/oss-security/2015/07/28/11
- http://lists.openstack.org/pipermail/openstack/2015-July/013548.html
CVE-2015-5695 · published · modified · JSON