Nixpkgs Security Tracker

Permalink CVE-2025-59029

updated 4 weeks, 1 day ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse dismissed 4 weeks, 1 day ago

Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.

Affected products

pdns-recursor

<5.3.2

Matching in nixpkgs

pkgs.pdns-recursor

Recursive DNS server

nixos-unstable 5.2.6
- nixpkgs-unstable 5.2.6
- nixos-unstable-small 5.2.6
nixos-25.05 5.2.6
- nixos-25.05-small 5.2.6
- nixpkgs-25.05-darwin 5.2.6

Package maintainers

@rnhmjoj Michele Guerini Rocco <rnhmjoj@inventati.org>

Upstream advisory: https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-07.html

5.2.x branch is not impacted.

Suggestions search

Affected products

Matching in nixpkgs

pkgs.pdns-recursor

Package maintainers