CVE-2024-25590

published 2024-10-03

CVE-2024-25590: An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and caching results for these sets can lead to a denial of…

Priority P3 36 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An attacker can publish a zone containing specific Resource Record Sets.

Repeatedly processing and caching results for these sets can lead to a

denial of service.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	pdns-recursor	< pdns-recursor 4.8.8-1+deb12u1 (bookworm)	pdns-recursor 4.8.8-1+deb12u1 (bookworm)
powerdns	recursor	< 4.9.9	4.9.9
powerdns	recursor	>= 5.0.0 < 5.0.9	5.0.9
powerdns	recursor	>= 5.1.0 < 5.1.2	5.1.2

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

osv 7.5 HIGH

vendor_debian 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20