CVE-2015-5695

MEDIUM6.5EPSS 2.4%

Designate mDNS DoS through incorrect handling of large RecordSets

發布日:2022/5/17修改日:2026/4/28

也稱為:DEBIAN-CVE-2015-5695

描述

Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.

受影響套件(3)

Debian/designatefrom 0, < 2015.1.0+2015.08.26.git34.9fa07c5798-1
PyPI/designate
PyPI/designate

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 4.0	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

參考連結(12)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2015-5695
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2015-5695
PATCHhttps://github.com/ironsource-mobile/designate
WEBhttp://lists.openstack.org/pipermail/openstack/2015-July/013548.html
WEBhttps://bugs.launchpad.net/designate/+bug/1471161
WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1245241
WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/designate/PYSEC-2017-114.yaml
WEBhttps://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
WEBhttps://www.openwall.com/lists/oss-security/2015/07/28/11
WEBhttps://www.openwall.com/lists/oss-security/2015/07/29/6
WEBhttp://www.openwall.com/lists/oss-security/2015/07/28/11
WEBhttp://www.openwall.com/lists/oss-security/2015/07/29/6