Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce…
Priority LOW 33CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Deferred Red Hat: fix deferred
Attack profile from CVSS 3.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.
Summary
Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.
Why it matters now
EPSS 0.02145 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Deferred Red Hat: fix deferred
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | designate (PyPI) | — | — | No fix listed | GHSA-m6h2-634h-jcpj |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- designate (PyPI) Vendor— Affected — Fixed in — No fix listed GHSA-m6h2-634h-jcpj
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | Affected | No fix planned: Will not fix |
| Red Hat OpenStack Platform 13 (Queens) | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 16.2 | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 17.1 | Affected | No fix planned: Out of support scope |
| Red Hat OpenStack Platform 18.0 | Affected | No fix yet: Fix deferred |
Timeline
- 2026-10-02 Threatist record created from CVE-2015-5695
- 2026-10-03 Alias added: GHSA-m6h2-634h-jcpj
- 2026-10-07 Affected versions changed · Red Hat
References
Patch 2
Advisory 4
- https://bugzilla.redhat.com/show_bug.cgi?id=1245241
- [oss-security] 20150729 Re: Re: CVE Request - OpenStack Designate mDNS DoS through incorrect handling of large RecordSets
- [oss-security] 20150728 Re: CVE Request - OpenStack Designate mDNS DoS through incorrect handling of large RecordSets
- https://nvd.nist.gov/vuln/detail/CVE-2015-5695
More OpenStack Designate vulnerabilities
- TI-2015-04800 Designate does not enforce the DNS protocol limit concerning record set sizes CVSS 3.1MEDIUM 6.5
Sources
- CVE-2015-5695 · CVE Program
- CVE-2015-5695 · NVD
- FIRST EPSS
- GHSA-m6h2-634h-jcpj · GitHub Advisory Database · CC BY 4.0
- CVE-2015-5695 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences