affected:
- package:
    ecosystem: PyPI
    name: designate
    purl: pkg:pypi/designate
  versions:
  - 2015.1.0b2
aliases:
- CVE-2015-5695
- GHSA-m6h2-634h-jcpj
details: Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not
  enforce RecordSets per domain, and Records per RecordSet quotas when processing
  an internal zone file transfer, which might allow remote attackers to cause a denial
  of service (infinite loop) via a crafted resource record set.
id: PYSEC-2017-114
modified: '2024-11-25T22:09:33.909779Z'
published: '2017-08-31T22:29:00Z'
references:
- type: ARTICLE
  url: https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
- type: FIX
  url: https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
- type: WEB
  url: https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patch
- type: REPORT
  url: https://bugzilla.redhat.com/show_bug.cgi?id=1245241
- type: EVIDENCE
  url: https://bugs.launchpad.net/designate/+bug/1471161
- type: REPORT
  url: https://bugs.launchpad.net/designate/+bug/1471161
- type: WEB
  url: https://bugs.launchpad.net/designate/+bug/1471161
- type: ARTICLE
  url: http://www.openwall.com/lists/oss-security/2015/07/29/6
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2015/07/29/6
- type: ARTICLE
  url: http://www.openwall.com/lists/oss-security/2015/07/28/11
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2015/07/28/11
- type: FIX
  url: http://lists.openstack.org/pipermail/openstack/2015-July/013548.html
- type: ADVISORY
  url: http://lists.openstack.org/pipermail/openstack/2015-July/013548.html
severity:
- score: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  type: CVSS_V3