PT-2025-22128 · Dnsdist+5 · Dnsdist+5

Renaud Allard · Published 2025-05-13 · Updated 2026-02-12 · CVE-2025-30193

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions DNSdist versions prior to 1.9.10

Description In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a TCP exchange that triggers an exhaustion of the stack and a crash of DNSdist, causing a denial of service.

Recommendations Upgrade to the patched 1.9.10 version. As a temporary workaround, consider restricting the maximum number of queries on incoming TCP connections to a safe value, like 50, via the setMaxTCPQueriesPerConnection setting.

Fix

DoS

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

BDU:2025-11255

CVE-2025-30193

OPENSUSE-SU-2025_01745-1

SUSE-SU-2025:01743-1

SUSE-SU-2025:01745-1

SUSE-SU-2025:01792-1

SUSE-SU-2025_01743-1

SUSE-SU-2025_01745-1

SUSE-SU-2025_01792-1

USN-8037-1

Affected Products

Dnsdist

Debian

Linuxmint

Red Os

Suse

Ubuntu

References · 36

• https://osv.dev/vulnerability/USN-8037-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30187 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8671 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-30193 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01743-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30193 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-30193 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30193 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01745-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30193 · Security Note
• https://ubuntu.com/security/notices/USN-8037-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11255 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01792-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30193 · Vendor Advisory