Vulnerability · Published Apr 7, 2025 · Assigned by OX
CVE-2025-30195A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
High 7.5
In plain English
A high-severity null pointer dereference in Recursor from PowerDNS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.22 | pdns-recursor | 5.2.0-r0 | ALPINE-CVE-2025-30195 |
| Alpine:v3.23 | pdns-recursor | 5.2.1-r0 | ALPINE-CVE-2025-30195 |
| Alpine:v3.24 | pdns-recursor | 5.2.1-r0 | ALPINE-CVE-2025-30195 |
| Debian:13 | pdns-recursor | 5.2.1-1 | DEBIAN-CVE-2025-30195 |
| Debian:14 | pdns-recursor | 5.2.1-1 | DEBIAN-CVE-2025-30195 |
| Ubuntu:24.04:LTS | pdns-recursor | no fix listed | UBUNTU-CVE-2025-30195 |
| Ubuntu:25.10 | pdns-recursor | no fix listed | UBUNTU-CVE-2025-30195 |
Affected products (as reported)
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H