Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-30195

Fixed in a distro release EPSS <1%CVSS 7.5

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention.

Published 2025-04-07 · CVE record · OSV

Products: powerdns recursor

Distro releases

ReleasePackageFixed in
Debian 13pdns-recursor5.2.1-1
Debian 14pdns-recursor5.2.1-1
Ubuntu 24.04 LTSpdns-recursorno fix
Ubuntu 25.10pdns-recursorno fix
Ubuntu Pro 16.04 LTSpdns-recursorno fix
Ubuntu Pro 18.04 LTSpdns-recursorno fix
Ubuntu Pro 20.04 LTSpdns-recursorno fix
Ubuntu Pro 22.04 LTSpdns-recursorno fix