PT-2017-6883 · Openstack · Openstack Designate

Florian Weimer · Published 2017-08-31 · Updated 2022-05-17 · CVE-2015-5695

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenStack Kilo Designate versions 2015.1.0 through 1.0.0.0b1

Description The issue does not properly enforce RecordSets per domain and Records per RecordSet quotas when processing an internal zone file transfer. This could allow remote attackers to cause a denial of service, potentially resulting in an infinite loop, via a crafted resource record set.

Recommendations For Designate versions 2015.1.0 through 1.0.0.0b1, as a temporary workaround, consider restricting the processing of internal zone file transfers to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2015-5695

GHSA-M6H2-634H-JCPJ

PYSEC-2017-114

Affected Products

Openstack Designate

References · 20

• 🔥 https://bugs.launchpad.net/designate/+bug/1471161 · Exploit
• https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch · Patch
• https://osv.dev/vulnerability/PYSEC-2017-114 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-5695 · Vendor Advisory
• http://lists.openstack.org/pipermail/openstack/2015-July/013548.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5695 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m6h2-634h-jcpj · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-5695 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5695 · Security Note
• https://ubuntu.com/security/CVE-2015-5695 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-5695 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5695 · Security Note
• https://github.com/pypa/advisory-database/tree/main/vulns/designate/PYSEC-2017-114.yaml · Note
• https://openwall.com/lists/oss-security/2015/07/29/6 · Note
• https://marc.info/?l=oss-security&m=143811778831673&w=2 · Note