Designate (Openstack) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-08-12. Vendor: Openstack.

CVEs of Designate

• CVE-2026-71194 - CVSS 6.8 (medium), 2026-08-12: In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the…
• CVE-2026-71193 - CVSS 9.6 (critical), 2026-08-12: In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool…
• CVE-2015-5694 - CVSS 6.5 (medium), 2019-11-22: Designate does not enforce the DNS protocol limit concerning record set sizes
• CVE-2015-5695 - CVSS 6.5 (medium), 2017-08-31: Designate 2015.1.0 through 1.0.0.0b1 as packaged in OpenStack Kilo does not enforce RecordSets per domain, and Records per RecordSet quotas when processing an…