PT-2025-49591 · Unknown+2 · Pdns-Recursor+2

Published 2025-01-01 · Updated 2026-04-13 · CVE-2025-59029

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions pdns-recursor (affected versions not specified)

Description An attacker can cause the software to fail due to an assertion failure. This is triggered by sending specially crafted DNS records, which are then cached, followed by a DNS query with the query type (qtype) set to ANY.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2025-59029

Affected Products

Debian

Powerdns Recursor

Pdns-Recursor

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-59029 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59029 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-59029 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-59029 · Vendor Advisory
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-07.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-59029 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-59029 · Security Note
• https://ubuntu.com/security/CVE-2025-59029 · Vendor Advisory
• https://twitter.com/oss_security/status/1998042804241715296 · Twitter Post
• https://twitter.com/CVEnew/status/1998355336714129723 · Twitter Post
• https://twitter.com/threatcluster/status/2043570038074986933 · Twitter Post
• https://t.me/cveNotify/152471 · Telegram Post
• https://t.me/CVEtracker/39235 · Telegram Post