Candidate: CVE-2015-5695
PublicDate: 2017-08-31 22:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5695
 https://marc.info/?l=oss-security&m=143811778831673&w=2
Description:
 Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not
 enforce RecordSets per domain, and Records per RecordSet quotas when
 processing an internal zone file transfer, which might allow remote
 attackers to cause a denial of service (infinite loop) via a crafted
 resource record set.
Ubuntu-Description:
Notes:
Bugs:
 https://launchpad.net/bugs/1471161
Priority: medium
Discovered-by: Florian Weimer
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H [6.5 MEDIUM]

Patches_designate:
 upstream: https://git.openstack.org/cgit/openstack/designate/commit/?id=46f187f53506de1237cdd14b5d2a69e73fd8f720 (kilo)
 upstream: https://git.openstack.org/cgit/openstack/designate/commit/?id=789709f1db081222c2e4d21d287781e437b76a95 (master)
 upstream: https://review.openstack.org/#/c/206580/ (kilo)
 upstream: https://review.openstack.org/#/c/206581/ (kilo)
upstream_designate: needed
precise_designate: DNE
precise/esm_designate: DNE
trusty_designate: DNE
trusty/esm_designate: DNE
vivid_designate: ignored (reached end-of-life)
vivid/stable-phone-overlay_designate: DNE
vivid/ubuntu-core_designate: DNE
wily_designate: ignored (reached end-of-life)
xenial_designate: not-affected (1:2.1.0-0ubuntu1)
yakkety_designate: ignored (reached end-of-life)
zesty_designate: not-affected (1:4.0.0-0ubuntu1)
devel_designate: not-affected (1:5.0.0~rc1-0ubuntu1)