CVE-2015-5694

Designate does not enforce the DNS protocol limit concerning record set sizes

6.5 MediumFix available

CVE-2015-5694 is a medium vulnerability (CVSS 6.5) in Openstack Designate, published November 22, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. Fixed in designate 2015.1.0+2015.08.26.git34.9fa07c5798-1.

Designate does not enforce the DNS protocol limit concerning record set sizes

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.83%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: CVE-2015-5694
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness: CWE-835
Updated: 2026-11-02

CVE List No score

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: CVE-2015-5694
Updated: 2026-11-02

EUVDEUVD-2019-0162 No score

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: EUVD-2019-0162
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c33m-22cr-j9x4 4.9

Designate does not enforce the DNS protocol limit concerning record set sizes

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: GHSA-c33m-22cr-j9x4
CVSS 4.0: 4.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-835
Updated: 2026-11-02

OSV 6.5

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: CVE-2015-5694
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2015-5694 6.5

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: DEBIAN-CVE-2015-5694
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVGHSA-c33m-22cr-j9x4 4.9

Designate does not enforce the DNS protocol limit concerning record set sizes

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: GHSA-c33m-22cr-j9x4
CVSS 4.0: 4.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-835
Updated: 2026-11-02

OSVPYSEC-2019-243 6.5

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: PYSEC-2019-243
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-5694 6.5

Designate does not enforce the DNS protocol limit concerning record set sizes

Record: UBUNTU-CVE-2015-5694
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`designate` PyPI	2015.1.0b2 to 2015.1.0b2	None known
`designate` Debian:12	before 2015.1.0+2015.08.26.git34.9fa07c5798-1	2015.1.0+2015.08.26.git34.9fa07c5798-1
`designate` Debian:13	before 2015.1.0+2015.08.26.git34.9fa07c5798-1	2015.1.0+2015.08.26.git34.9fa07c5798-1
`designate` Debian:14	before 2015.1.0+2015.08.26.git34.9fa07c5798-1	2015.1.0+2015.08.26.git34.9fa07c5798-1
`designate` PyPI	Listed versions 2015.1.0b2	None known

History

History
When	Changed	Sources
2026-11-03	affected
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less