debian/designate vulnerabilities

Latest debian/designate CVEs

Newest publication first

1. CVE-2026-71194 openstack-designate: designate: mDNS NOTIFY handler DoS via pool-blind zone lookup

   Published 2026-08-12

   Medium·CVSS 6.8 EPSS 0.52%

   In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED...

2. CVE-2026-71193 openstack-designate: designate: cross-tenant DNS zone overlap via pool-scoped ownership checks when using AttributeFilter scheduler

   Published 2026-08-12

   Critical·CVSS 9.6 EPSS 0.53%

   In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter schedul...

3. CVE-2023-6725 Tripleo-ansible: bind keys are world readable

   Published 2024-03-15

   Medium·CVSS 5.5 EPSS 0.20%

   An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive informati...

4. CVE-2015-5694 Designate does not enforce the DNS protocol limit concerning record set sizes

   Published 2019-11-22

   Medium·CVSS 6.5 EPSS 1.8%

   Designate does not enforce the DNS protocol limit concerning record set sizes

5. CVE-2015-5695 Designate mDNS DoS through incorrect handling of large RecordSets

   Published 2017-08-31

   Medium·CVSS 6.5 EPSS 2.1%

   Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an internal zone file transfer, which might allow remote attackers to cause a denial of service (infinite loop) via a crafte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.