In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the hand…
OpenStack Designate vulnerabilities (CVE)
CVE records published for OpenStack Designate, newest first. Follow to get an email when a new one appears.
6.8Medium
OpenStack Designate
9.6Critical
OpenStack Designate
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the At…