CVE-2025-59024: Crafted delegations or IP fragments can poison cached delegations in Recursor
Published Feb 9, 2026
·Updated
Crafted delegations or IP fragments can poison cached delegations in Recursor.
Affected Software
3 affected components
PowerDNS recursor>=5.1.0<5.1.8
PowerDNS recursor>=5.2.0<5.2.6
PowerDNS recursor>=5.3.0<5.3.1
Event History
Feb 9, 2026
CVE Published
via MITRE·02:44 PM
Data Sourced
via MITRE·02:44 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59024?
CVE-2025-59024 has a moderate severity rating due to the potential for DNS cache poisoning.
2
How do I fix CVE-2025-59024?
To fix CVE-2025-59024, upgrade PowerDNS Recursor to the latest version that addresses this vulnerability.
3
What versions of PowerDNS Recursor are affected by CVE-2025-59024?
PowerDNS Recursor versions 5.1.0 to 5.1.8, 5.2.0 to 5.2.6, and 5.3.0 to 5.3.1 are affected by CVE-2025-59024.
4
What is the impact of exploiting CVE-2025-59024?
Exploiting CVE-2025-59024 may allow an attacker to manipulate DNS responses, leading to potential redirection to malicious sites.
5
How can I mitigate risks associated with CVE-2025-59024?
To mitigate risks associated with CVE-2025-59024, ensure that PowerDNS Recursor is regularly updated and monitor DNS traffic for anomalies.