CVE-2025-30195 - CVE House

Back to Database

Status published High CVE-2025-30195

A crafted zone can lead to an illegal memory access in the PowerDNS Recursor

7.5 CVSS

Vulnerability Description

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodymyr Ilyin for bringing this issue to our attention.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-30195

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Volodymyr Ilyin

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html

More from PowerDNS

View All →

Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor

Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor

Denial of service via crafted DoH exchange

Affected Vendor

PowerDNS

View all reports →

Affected Software

Recursor

Vulnerable Versions:

5.2.0

Timeline

Official Publish: April 7th, 2025

Last Modified: April 7th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1499.004 Application or System Exploitation

T1489 Service Stop

T1203 Exploitation for Client Execution

T1190 Exploit Public-Facing Application