CVE-2015-5695

Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted resource record set.

• CWE-400

• http://lists.openstack.org/pipermail/openstack/2015-July/013548.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2015/07/28/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/07/29/6Mailing List, Third Party Advisory
• https://bugs.launchpad.net/designate/+bug/1471161Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1245241Issue Tracking, Third Party Advisory
• https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patchMailing List, Patch, Third Party Advisory
• http://lists.openstack.org/pipermail/openstack/2015-July/013548.htmlPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2015/07/28/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/07/29/6Mailing List, Third Party Advisory
• https://bugs.launchpad.net/designate/+bug/1471161Exploit, Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1245241Issue Tracking, Third Party Advisory
• https://launchpadlibrarian.net/211525251/bug-1471161-quotas-master.patchMailing List, Patch, Third Party Advisory

Published

Aug 31, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5689ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Sol…
• CVE-2015-5690The management console on Symantec Web Gateway (SWG) applian…
• CVE-2015-5691Multiple cross-site scripting (XSS) vulnerabilities in PHP s…
• CVE-2015-5692admin_messages.php in the management console on Symantec Web…
• CVE-2015-5693The management console on Symantec Web Gateway (SWG) applian…
• CVE-2015-5694Designate does not enforce the DNS protocol limit concerning…6.5
• CVE-2015-5696Dell Netvault Backup before 10.0.5 allows remote attackers t…
• CVE-2015-5697The get_bitmap_file function in drivers/md/md.c in the Linux…
• CVE-2015-5698Cross-site request forgery (CSRF) vulnerability in the web s…
• CVE-2015-5699The Switch Configuration Tools Backend (clcmd_server) in Cum…
• CVE-2015-5700mktexlsr revision 22855 through revision 36625 as packaged i…
• CVE-2015-5701mktexlsr revision 36855, and before revision 36626 as packag…