USN-8860-1: OpenStack Designate vulnerability
Ubuntu warns OpenStack Designate may let authenticated users redirect DNS or cause a denial of service.
Ubuntu published USN-8860-1 for OpenStack Designate. The service did not properly validate overlapping zones in some circumstances. An authenticated user could redirect DNS traffic to attacker-controlled systems or cause a denial of service. The notice does not say the issue is being exploited.
- OpenStack Designate failed to validate overlapping DNS zones.
- An authenticated user could redirect DNS or cause denial of service.
- Ubuntu USN-8860-1 does not report active exploitation.
- Vendors
- Ubuntu
- Products
- OpenStack Designate
From the original article
It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user could possibly use this issue to redirect DNS traffic to attacker-controlled systems or cause a denial of service.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.