OpenStack Kilo Designate Denial of Service Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA and Rackspace, Inc.OpenStack Kilo is a version of OpenStack.Designate is one of the DNSaaS components. A security vulnerability exists in Designate versions 2015.1.0 through...

CVE-2015-5695

Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service infinite loop via a crafted resource record s...

CVE-2015-5695

CVE-2015-5695 affects OpenStack Designate (Kilo: 2015.1.0 through 1.0.0.0b1). The vulnerability arises because quotas for RecordSets per domain and Records per RecordSet are not enforced when processing internal zone file transfers, which can allow a remote attacker to trigger an infinite loop in...

CVE-2015-5695: Uncontrolled Resource Consumption

Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service infinite loop via a crafted resource record s...

OpenStack Designate 'mDNS' Service Denial of Service Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA and Rackspace, Inc. in the United States. A denial of service vulnerability exists in OpenStack Designate 'mDNS' Service, which allows remote attackers to exploit this vulnerabilit...