CVE-2015-5695

Description

Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

2.434

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-5694,CVE-2015-5695 are affected in Python-designate 2015.1.0b2	Windows
Vulnerabilities CVE-2015-5694,CVE-2015-5695 are affected in Python-designate for linux 2015.1.0b2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234