In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the hand…
Vulnerabilidades de OpenStack Designate (CVE)
Registros CVE publicados para OpenStack Designate, los más recientes primero. Siga el producto para recibir un correo con cada nueva.
6.8Media
OpenStack Designate
9.6Crítica
OpenStack Designate
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only. An authenticated user can bypass these checks by scheduling a zone to a different pool via the At…