CVE-2025-30195 — A crafted zone can lead to an illegal memory access in the PowerDNS Recursor

CVE-2025-30195

A crafted zone can lead to an illegal memory access in the PowerDNS Recursor PUBLISHED

Description (CNA)

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention.

Affected (CNA)

Vendor / product	Versions
PowerDNS / Recursor	affected 5.2.0

CWE

CWE-476

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/04/07/1