CVE-2024-25590

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-25590
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-25590.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-25590
Downstream
Related
Published
2024-10-03T15:29:08Z
Modified
2026-08-12T15:17:03Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor
Details

An attacker can publish a zone containing specific Resource Record Sets.

Repeatedly processing and caching results for these sets can lead to a

denial of service.

Database specific 
{
    "cna_assigner": "OX",
    "cwe_ids": [
        "CWE-20"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25590.json"
}
References

Affected packages

Git / github.com/powerdns/pdns

Affected ranges

Type
GIT
Repo
https://github.com/powerdns/pdns
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4775860c55ede7717e6e5702a90632cae5efd28e
Introduced
d1499af06af5dfdff785e9b0595ee692074dba6e
Fixed
49f201d641e75041a4cf51077df95579cb5ffb71
Introduced
f6109dd21a7e7a936912a5c7605a88b4f10719b3
Fixed
9872469c75619fd857e63f31aab165e63a6dbec5
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.9.9"
        },
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "5.0.9"
        },
        {
            "introduced": "5.1.0"
        },
        {
            "fixed": "5.1.2"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

auth-3.*
auth-3.1-rc1
auth-3.1-rc2
auth-3.1-rc3
auth-3.2-rc1
auth-3.2-rc2
auth-3.2-rc3
auth-3.2-rc4
auth-3.4.0
auth-3.4.0-rc1
auth-3.4.0-rc2
auth-4.*
auth-4.0.0
auth-4.0.0-alpha1
auth-4.0.0-alpha2
auth-4.0.0-alpha3
auth-4.0.0-beta1
auth-4.0.0-rc1
auth-4.0.0-rc2
auth-4.0.1
auth-4.1.0
auth-4.1.0-rc1
auth-4.1.0-rc2
auth-4.1.0-rc3
auth-4.2.0-alpha1
auth-4.2.0-beta1
auth-4.2.0-rc1
auth-4.2.0-rc2
auth-4.3.0-alpha1
auth-4.3.0-beta1
auth-4.3.0-beta2
auth-4.4.0-alpha0
auth-4.4.0-alpha1
auth-4.4.0-alpha2
auth-4.4.0-alpha3
auth-4.4.0-beta1
auth-4.5.0-alpha0
auth-4.5.0-alpha1
auth-4.5.0-beta1
auth-4.6.0-alpha0
auth-4.6.0-alpha1
auth-4.6.0-beta1
auth-4.7.0-alpha1
auth-4.8.0-alpha0
auth-4.8.0-alpha1
auth-4.8.0-beta1
dnsdist-1.*
dnsdist-1.0.0
dnsdist-1.0.0-alpha1
dnsdist-1.0.0-alpha2
dnsdist-1.0.0-beta1
dnsdist-1.1.0
dnsdist-1.1.0-beta1
dnsdist-1.1.0-beta2
dnsdist-1.2.0
dnsdist-1.3.0
dnsdist-1.3.1
dnsdist-1.3.2
dnsdist-1.3.3
dnsdist-1.4.0
dnsdist-1.4.0-alpha1
dnsdist-1.4.0-alpha2
dnsdist-1.4.0-beta1
dnsdist-1.4.0-rc1
dnsdist-1.4.0-rc2
dnsdist-1.4.0-rc3
dnsdist-1.4.0-rc4
dnsdist-1.4.0-rc5
dnsdist-1.5.0
dnsdist-1.5.0-alpha1
dnsdist-1.5.0-rc1
dnsdist-1.5.0-rc2
dnsdist-1.5.0-rc3
dnsdist-1.5.0-rc4
dnsdist-1.6.0
dnsdist-1.6.0-alpha0
dnsdist-1.6.0-alpha1
dnsdist-1.6.0-alpha2
dnsdist-1.6.0-alpha3
dnsdist-1.6.0-rc1
dnsdist-1.6.0-rc2
dnsdist-1.7.0-alpha0
dnsdist-1.7.0-alpha1
dnsdist-1.7.0-alpha2
dnsdist-1.7.0-beta1
dnsdist-1.7.0-beta2
dnsdist-1.8.0
dnsdist-1.8.0-alpha0
dnsdist-1.8.0-rc1
dnsdist-1.8.0-rc2
dnsdist-1.8.0-rc3
dnsdist-1.9.0-alpha0
Other
rec-3-0
rec-3-0-1
rec-3.*
rec-3.0
rec-3.0.1
rec-3.1.4
rec-3.3.1
rec-3.5
rec-3.5-rc1
rec-3.5-rc3
rec-3.5-rc4
rec-3.5-rc5
rec-3.6.0
rec-4.*
rec-4.0.0
rec-4.0.0-alpha1
rec-4.0.0-alpha2
rec-4.0.0-alpha3
rec-4.0.0-beta1
rec-4.0.0-rc1
rec-4.0.1
rec-4.0.2
rec-4.1.0
rec-4.1.0-alpha1
rec-4.1.0-rc1
rec-4.1.0-rc2
rec-4.1.0-rc3
rec-4.10.0-alpha0
rec-4.2.0-alpha1
rec-4.2.0-beta1
rec-4.2.0-rc1
rec-4.3.0-alpha1
rec-4.3.0-alpha2
rec-4.3.0-alpha3
rec-4.3.0-beta1
rec-4.4.0-alpha0
rec-4.4.0-alpha1
rec-4.4.0-alpha2
rec-4.4.0-beta1
rec-4.5.0-alpha0
rec-4.5.0-alpha1
rec-4.5.0-alpha2
rec-4.5.0-alpha3
rec-4.5.0-beta1
rec-4.6.0-alpha0
rec-4.6.0-alpha1
rec-4.6.0-alpha2
rec-4.6.0-beta1
rec-4.6.0-beta2
rec-4.7.0-alpha1
rec-4.7.0-beta1
rec-4.8.0-alpha1
rec-4.9.0
rec-4.9.0-alpha0
rec-4.9.0-alpha1
rec-4.9.0-beta1
rec-4.9.0-rc1
rec-4.9.1
rec-4.9.2
rec-4.9.4
rec-4.9.6
rec-4.9.7
rec-4.9.8
rec-5.*
rec-5.0.0
rec-5.0.0-rc2
rec-5.0.1
rec-5.0.3
rec-5.0.5
rec-5.0.6
rec-5.0.7
rec-5.0.8
rec-5.1.0
rec-5.1.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-25590.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "3414123305728934674673560872746067470",
                "64101788944131007705854300397802115599",
                "80675656506297196043519785770337914010",
                "182489539102832472064143413535030856557",
                "258115070079075951832105962955253317438",
                "102455799556652026046465596050330361409",
                "66634926283702242556254941192503918648",
                "40609170395090779703361349635509654676"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-0db03734",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/recursor_cache.hh"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "149688647191929557926836092039672316138",
                "184517274448688535326249839607475034259",
                "213638317065629002624888250010229973608",
                "103300825323056153166411498218906677951"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-0fca30a3",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-syncres_cc8.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "49590830657678165528250752000205479820",
                "191841617989050315147582688721281909190",
                "259115177466232506890205916133033842087"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-3a3981d6",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/uuid-utils.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "305335240574864059203577485228953916198",
            "length": 1100
        },
        "id": "CVE-2024-25590-46358a8b",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-syncres_cc3.cc",
            "function": "BOOST_AUTO_TEST_CASE"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "60794374466687775158923788478520799363",
                "176127964419103866721810524902190675532",
                "121829292120933210502549120396118989495",
                "92816815651313794479621008019734642379",
                "243980717529146128040303129283558474385",
                "253126806691238973887390123644163575373",
                "181002444595453377260520815318456037708",
                "113131884307018657277125850358912637608"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-554ee17e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/rec-main.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "187801608706694548539116910224107805616",
            "length": 27205
        },
        "id": "CVE-2024-25590-6acdd4aa",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/rec-main.cc",
            "function": "initArgs"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "180478540347986857583254448157490175364",
                "224755860739872875770638335352424796443",
                "288436739979549589692351440417763647805",
                "22365933812626959307462702040553882163",
                "231383572259156124415413672284390245832",
                "333433467154961675914239718579197004571",
                "128571794711502092427617620409020712998",
                "109320462972409644585529333995500901700",
                "81071967133501049837737265695180149773",
                "120744664866596932500357648917117576558",
                "93904541810071009361179674885054121994",
                "5317571282827155344731241803085635442",
                "95857692395829152442932225505891550331",
                "136728979696859556017640397002214847860",
                "156238206984524164643575475709338186143",
                "18110459802514633504800420846651883802",
                "274374139790523444937331937997930897855",
                "233117170844996374304001375923763786091",
                "134392673835383961972436849260920022013",
                "289452466655563869119774009349525539874",
                "230493995808097570175046120009385357709"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-7ab4f0ba",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-syncres_cc3.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "62853631870203618840480334366852339536",
                "207966248931484848418473233672858331855",
                "37935249810271821152242495146510005843",
                "143706467489536381036242626132703123272"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-7f1beb5e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-syncres_cc.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "285883787713832469742164816997763915583",
            "length": 3181
        },
        "id": "CVE-2024-25590-8bad8f32",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-syncres_cc8.cc",
            "function": "BOOST_AUTO_TEST_CASE"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "183266419767969700558112295829184086912",
            "length": 2409
        },
        "id": "CVE-2024-25590-9bcda675",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/recursor_cache.cc",
            "function": "MemRecursorCache::doDump"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "108525911895358519817874051642937088667",
                "117369526404429690672470898306668874305",
                "190511765747541335953364240177879202193",
                "90949562681215680568030352439533250972",
                "186118914476575663103152335644118879165",
                "295198639662289736257513326354412030843",
                "175111216416599413811262495528638248883",
                "306595087978521055295360581249885666227",
                "181304557566913713444288892646529309214",
                "150293771667925484353492376824997119526",
                "216929577896883042651977689307296768113",
                "140514614359440731975829889727170897334",
                "156257994182300124829568894695778313266",
                "95430435370720377538466713102112559433",
                "227246235031148576252960304327330942114",
                "173471197535951019768388329773324695604",
                "291961460363120843286560057008778057890",
                "154213416000539962586792623582700588540",
                "174018023089896622736510785027329621001",
                "308993347017538729543137080666926960473",
                "108333809648636550108848020263271164138",
                "302283086660993946339744286960854591367",
                "125863767296709287956726385087185167351",
                "319589423612832280556496753311096705728",
                "322028529766431679120360663257125578339",
                "110455762873945356631444761172791309924",
                "170995956256273644131767294504417450169",
                "323024048001473663020295365652119218843",
                "200660906791066263958423892391265081808",
                "2554207092687878476937143467418299292",
                "184326243487560615573091721338147880707",
                "240381814806227943060718342560100303834",
                "179839571088869846699446082664168534129",
                "43700719790782033477746328791164766136",
                "57928273528561685182198284904023464874",
                "325375979742653663110708277940822978028",
                "108333809648636550108848020263271164138",
                "302283086660993946339744286960854591367",
                "125863767296709287956726385087185167351",
                "319589423612832280556496753311096705728",
                "322028529766431679120360663257125578339",
                "110455762873945356631444761172791309924",
                "170995956256273644131767294504417450169",
                "323024048001473663020295365652119218843",
                "200660906791066263958423892391265081808",
                "2554207092687878476937143467418299292",
                "184326243487560615573091721338147880707",
                "169463250232013542546768866015513980946",
                "280690388020970223105143133370491270465",
                "120962454662592718848046169918439693054",
                "335988301124616507784701666442223860196",
                "277148837134789746737131902329616001491",
                "275936779897126657531017906887440163505",
                "335583961435289089219576455452020343574",
                "97560210651489059443247483513135125907",
                "73863235305147186950784810629215853663",
                "303231350081824778048689221093965835931",
                "60707315367301197105990440219043715051",
                "81861025863622339792785292482492636311",
                "153790607994068015349071353311777130568",
                "290071531260876129414143200143456763080",
                "61740898623313020707926014062901284643",
                "73659545098983391400367859097347036011",
                "56455353253303996532199519837033945464"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-b2291c67",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/recursor_cache.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "110265368000169887870988860896119499096",
            "length": 3348
        },
        "id": "CVE-2024-25590-b6d0c120",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-syncres_cc.cc",
            "function": "initSR"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "149977703169693183970481022797089936531",
                "128800879354160129135192148672564007913",
                "194495915763764426460250727679407693777",
                "301358666311042758090520590971451344316",
                "108333809648636550108848020263271164138",
                "302283086660993946339744286960854591367",
                "146485727435344565036667152563049843607",
                "21473893049952292151124117765904740188",
                "128387126165100483431975823158888248599",
                "175913592699814803004011903524774806640",
                "126464941360936261869796750946822632760",
                "323024048001473663020295365652119218843",
                "322343155045960585134841169695977094416",
                "320963312289492138364242567080894622589",
                "173213027477966697672281318542692063133",
                "103778123790719189400834905417306033715",
                "37268508562009860443609354301301880124",
                "262138621126659433039107303462253244753",
                "39375183591857516344602869033912555084",
                "108333809648636550108848020263271164138",
                "302283086660993946339744286960854591367",
                "146485727435344565036667152563049843607",
                "21473893049952292151124117765904740188",
                "128387126165100483431975823158888248599",
                "175913592699814803004011903524774806640",
                "126464941360936261869796750946822632760",
                "323024048001473663020295365652119218843",
                "322343155045960585134841169695977094416",
                "320963312289492138364242567080894622589",
                "173213027477966697672281318542692063133",
                "250583059997623998670205291640302319047",
                "326218598847239084116976408860006675095",
                "215297024700022141306993727489588481608",
                "3074995750411330785293275916231266670"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-c17c52ca",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/9872469c75619fd857e63f31aab165e63a6dbec5",
        "target": {
            "file": "pdns/recursordist/recursor_cache.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "149977703169693183970481022797089936531",
                "128800879354160129135192148672564007913",
                "194495915763764426460250727679407693777",
                "301358666311042758090520590971451344316",
                "108333809648636550108848020263271164138",
                "302283086660993946339744286960854591367",
                "146485727435344565036667152563049843607",
                "21473893049952292151124117765904740188",
                "128387126165100483431975823158888248599",
                "175913592699814803004011903524774806640",
                "126464941360936261869796750946822632760",
                "323024048001473663020295365652119218843",
                "322343155045960585134841169695977094416",
                "320963312289492138364242567080894622589",
                "173213027477966697672281318542692063133",
                "103778123790719189400834905417306033715",
                "37268508562009860443609354301301880124",
                "262138621126659433039107303462253244753",
                "39375183591857516344602869033912555084",
                "108333809648636550108848020263271164138",
                "302283086660993946339744286960854591367",
                "146485727435344565036667152563049843607",
                "21473893049952292151124117765904740188",
                "128387126165100483431975823158888248599",
                "175913592699814803004011903524774806640",
                "126464941360936261869796750946822632760",
                "323024048001473663020295365652119218843",
                "322343155045960585134841169695977094416",
                "320963312289492138364242567080894622589",
                "173213027477966697672281318542692063133",
                "250583059997623998670205291640302319047",
                "326218598847239084116976408860006675095",
                "215297024700022141306993727489588481608",
                "3074995750411330785293275916231266670"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-d4b69dcf",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/49f201d641e75041a4cf51077df95579cb5ffb71",
        "target": {
            "file": "pdns/recursordist/recursor_cache.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "132751518075967949798555974808516245887",
                "162038430184915042216680149976712492343",
                "335389106611626687676500510628810000098",
                "200595120998462151096392642166655419456",
                "32531164410641691965967602202198545483",
                "322163337906955670373963275428198616597",
                "103578076632326157105912127839078178967",
                "128732815190251385505382636283724577522",
                "305089741668516325460919807758562619784",
                "66402396706985785346072293059769435305"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2024-25590-dee29b92",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-recursorcache_cc.cc"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "254523539017773487718771529321110958765",
            "length": 13336
        },
        "id": "CVE-2024-25590-f3946bd4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e",
        "target": {
            "file": "pdns/recursordist/test-recursorcache_cc.cc",
            "function": "simple"
        }
    }
]
vanir_signatures_modified 
"2026-08-12T15:17:03Z"