redhat/openstack-designate vulnerabilities

Latest redhat/openstack-designate CVEs

Newest publication first

1. CVE-2026-71194 openstack-designate: designate: mDNS NOTIFY handler DoS via pool-blind zone lookup

   Published 2026-08-12

   Medium·CVSS 6.8 EPSS 0.52%

   In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED...

2. CVE-2026-71193 openstack-designate: designate: cross-tenant DNS zone overlap via pool-scoped ownership checks when using AttributeFilter scheduler

   Published 2026-08-12

   Critical·CVSS 9.6 EPSS 0.53%

   In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the AttributeFilter schedul...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.