CVE-2024-25583
Fixed in a distro release EPSS <1%CVSS 7.5
A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.
Products: powerdns recursor, powerdns
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdns-recursor | 4.8.8-1 |
| Debian 13 | pdns-recursor | 4.9.5-1 |
| Debian 14 | pdns-recursor | 4.9.5-1 |
| SUSE Package Hub 15 SP5 | pdns-recursor | 4.8.8-bp155.2.6.1 |
| Ubuntu 24.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 16.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 18.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 20.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 22.04 LTS | pdns-recursor | no fix |
| openSUSE Leap 15.5 | pdns-recursor | 4.8.8-bp155.2.6.1 |
| openSUSE Tumbleweed | pdns-recursor | 5.0.4-1.1 |