{"action":"No fix published. Pin and monitor.","affected":[],"component":"designate","cve_ids":["CVE-2015-5695"],"ecosystem":"PyPI","epss":0.02145,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m6h2-634h-jcpj","id":"tcs_01M5KG72M91P74HTMGA4QWR9ES","modified_at":"2024-11-25T22:42:05.854418Z","published_at":"2017-08-31T22:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2017-114","https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch","https://bugzilla.redhat.com/show_bug.cgi?id=1245241","https://bugs.launchpad.net/designate/+bug/1471161","http://www.openwall.com/lists/oss-security/2015/07/29/6","http://www.openwall.com/lists/oss-security/2015/07/28/11","http://lists.openstack.org/pipermail/openstack/2015-July/013548.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2017-114","url":"https://osv.dev/vulnerability/PYSEC-2017-114"}],"summary":"Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might"}