Vulnerabilidades de OpenStack Designate (CVE)

Registros CVE publicados para OpenStack Designate, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
6.8Media
CVE-2026-71194
OpenStack Designate

In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the hand…

9.6Crítica
CVE-2026-71193
OpenStack Designate

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the At…