CVE-2025-30195
CVE-2025-30195 · A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention.
CVSS 7.5 · High · EPSS 0.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
recursor
- Versions
- 5.2.0: Affected
No fix published
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 5.2.1-1
Update to 5.2.1-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 5.2.1-1
Update to 5.2.1-1
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:18.04:LTS
- Versions
- 4.0.6-1
- 4.0.6-1build1
- 4.0.7-1
- 4.1.1-1
- 4.1.1-1build1
- 4.1.1-2
- 4.1.1-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:20.04:LTS
- Versions
- 4.2.0-6
- 4.2.1-1
- 4.2.1-1build1
- 4.2.1-1build2
- 4.2.1-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:22.04:LTS
- Versions
- 4.4.2-3
- 4.6.0-1ubuntu1
- 4.6.0-1ubuntu1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:24.04:LTS
- Versions
- 4.9.0-2
- 4.9.1-4
- 4.9.2-1
- 4.9.2-1build1
- 4.9.2-2
- 4.9.3-1
- 4.9.3-1build2
- 4.9.3-1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:25.10
- Versions
- 5.2.0-5
- 5.2.2-1
- 5.2.2-2
- 5.2.4-2
- 5.2.4-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published