Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-30195

A crafted zone can lead to an illegal memory access in the PowerDNS Recursor

Description

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS Recursor

Default version status: unaffected

  • 5.2.0affected

References