Openstack
Openstack Designate: vulnerabilidades y CVE
Openstack Designate tiene 4 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses2
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-71194 | Media (6.8) | 0.52% | — | 12 ago 2026 | In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with… |
| CVE-2026-71193 | Crítica (9.6) | 0.53% | — | 12 ago 2026 | In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by… |
| CVE-2015-5694 | Media (6.5) | 1.8% | — | 22 nov 2019 | Designate does not enforce the DNS protocol limit concerning record set sizes |
| CVE-2015-5695 | Media (6.5) | 2.1% | — | 31 ago 2017 | Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote… |