CVE-2024-25590 — Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor

CVE-2024-25590

Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor PUBLISHED

Description (CNA)

An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and caching results for these sets can lead to a denial of service.

Affected (CNA)

Vendor / product	Versions
PowerDNS / Recursor	affected 0 before 4.9.9; affected 5.0.0 before 5.0.9; affected 5.1.0 before 5.1.2

CWE

CWE-20

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-04.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2024/10/03/3