CVE-2015-5694 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 75%

Vendor	Product	Version
openstack	designate	1.0.0:a0
openstack	designate	1.0.0.0:b1
openstack	designate	2015.1.0
debian	debian_linux	8.0
debian	debian_linux	9.0
debian	debian_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

designate

bullseye	1:11.0.0-2 fixed
jessie	not-affected
bookworm	1:15.0.0-4 fixed
sid	1:19.0.0-1 fixed
trixie	1:19.0.0-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

designate

zesty	not-affected
yakkety	ignored
xenial	not-affected
wily	ignored
vivid	ignored
trusty	dne
precise	dne

Common Weakness Enumeration

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References

http://www.openwall.com/lists/oss-security/2015/07/28/11

http://www.openwall.com/lists/oss-security/2015/07/29/6

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5694

https://security-tracker.debian.org/tracker/CVE-2015-5694

http://www.openwall.com/lists/oss-security/2015/07/28/11

http://www.openwall.com/lists/oss-security/2015/07/29/6

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-5694

https://security-tracker.debian.org/tracker/CVE-2015-5694