CVE-2025-59029CWE-617

CVE-2025-59029

Medium · published December 9, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00374 · 30.2th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2025-12-09T21:17Z
Affected products (2)
ProductVersionsFixed in
powerdns/recursorall versions—
powerdns/recursorall versions—
References (1)
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-07.html · [email protected]
EPSS history
Timeline
  • 09 DEC 09:16Z
    Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor
    cvelistv5