Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-25583

Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured

Description

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS Recursor

Default version status: unaffected

  • 4.8.7affected
  • 4.9.4affected
  • 5.0.3affected

References