CVE-2025-30195
A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
Résumé
A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service.
The remedy is: upgrade to the patched 5.2.1 version.
We would like to thank Volodymyr Ilyin for bringing this issue to our attention.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-30195 pdns-recursor Corrigé dans: 5.2.1-1
Références
- advisory docs.powerdns.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web openwall.com
- web repo.powerdns.com