CVE-2025-59023 — Recursor vulnerability

6 documents6 sources
Severity
8.2HIGHNVD
EPSS
0.0%
top 99.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Powerdns Recursor
Timeline
PublishedFeb 9

Description

Crafted delegations or IP fragments can poison cached delegations in Recursor.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:LExploitability: 3.9 | Impact: 4.2

Affected Packages1 packages

▶CVEListV5powerdns/recursor5.3.0 — 5.3.1+2

🔴Vulnerability Details

3
OSV
CVE-2025-59023: Crafted delegations or IP fragments can poison cached delegations in Recursor↗2026-02-09
▶
CVEList
Crafted delegations or IP fragments can poison cached delegations in Recursor↗2026-02-09
▶
GHSA
GHSA-jgvp-6mmr-4mrw: Crafted delegations or IP fragments can poison cached delegations in Recursor↗2026-02-09
▶

📋Vendor Advisories

1
Debian
CVE-2025-59023: pdns-recursor - Crafted delegations or IP fragments can poison cached delegations in Recursor.↗2025
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-59023 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-59023 — Powerdns Recursor vulnerability | cvebase