CVE-2025-30195: A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service.
The remedy is: upgrade to the patched 5.2.1 version.
We would like to thank Volodymyr Ilyin for bringing this issue to our attention.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30195?
CVE-2025-30195 has been classified as a denial of service vulnerability that can lead to crashes in the PowerDNS Recursor.
How do I fix CVE-2025-30195?
To fix CVE-2025-30195, upgrade to the patched version 5.2.1 of PowerDNS Recursor.
What causes CVE-2025-30195?
CVE-2025-30195 is caused by an attacker publishing a zone containing specific Resource Record Sets that lead to illegal memory accesses.
What are the symptoms of CVE-2025-30195?
Symptoms of CVE-2025-30195 include crashes of the Recursor, resulting in denial of service.
Which versions of PowerDNS are affected by CVE-2025-30195?
Versions of PowerDNS Recursor prior to 5.2.1 are affected by CVE-2025-30195.