{"id":"CVE-2024-25590","summary":"Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor","details":"An attacker can publish a zone containing specific Resource Record Sets.\n\n Repeatedly processing and caching results for these sets can lead to a \n\ndenial of service.","modified":"2026-08-18T17:26:42.015431Z","published":"2024-10-03T15:29:08.765Z","related":["openSUSE-SU-2024:14462-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25590.json","cna_assigner":"OX","cwe_ids":["CWE-20"]},"references":[{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2024/10/03/3"},{"type":"WEB","url":"https://repo.powerdns.com/"},{"type":"ADVISORY","url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-04.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25590.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25590"},{"type":"PACKAGE","url":"https://github.com/PowerDNS/pdns"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/powerdns/pdns","events":[{"introduced":"0"},{"fixed":"4775860c55ede7717e6e5702a90632cae5efd28e"},{"introduced":"d1499af06af5dfdff785e9b0595ee692074dba6e"},{"fixed":"49f201d641e75041a4cf51077df95579cb5ffb71"},{"introduced":"f6109dd21a7e7a936912a5c7605a88b4f10719b3"},{"fixed":"9872469c75619fd857e63f31aab165e63a6dbec5"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"4.9.9"},{"introduced":"5.0.0"},{"fixed":"5.0.9"},{"introduced":"5.1.0"},{"fixed":"5.1.2"}],"source":"AFFECTED_FIELD"}}],"versions":["rec-4.9.8","rec-5.0.8","rec-5.1.1","rec-5.1.0","rec-4.9.7","rec-5.0.7","rec-5.0.6","rec-4.9.6","rec-5.0.5","rec-4.9.4","rec-5.0.3","rec-5.0.1","rec-5.0.0-rc2","rec-5.0.0","rec-4.9.2","rec-4.9.1","rec-4.9.0","rec-4.9.0-rc1","rec-4.10.0-alpha0","rec-4.9.0-beta1","dnsdist-1.8.0","auth-4.8.0-beta1","rec-4.9.0-alpha1","dnsdist-1.9.0-alpha0","auth-4.8.0-alpha1","dnsdist-1.8.0-rc3","dnsdist-1.8.0-rc2","dnsdist-1.8.0-rc1","rec-4.9.0-alpha0","rec-4.8.0-alpha1","auth-4.8.0-alpha0","rec-4.7.0-beta1","rec-4.7.0-alpha1","auth-4.7.0-alpha1","auth-4.6.0-beta1","dnsdist-1.8.0-alpha0","dnsdist-1.7.0-beta2","rec-4.6.0-beta2","dnsdist-1.7.0-beta1","rec-4.6.0-beta1","rec-4.6.0-alpha2","dnsdist-1.7.0-alpha2","auth-4.6.0-alpha1","rec-4.6.0-alpha1","dnsdist-1.7.0-alpha1","auth-4.5.0-beta1","auth-4.6.0-alpha0","dnsdist-1.6.0","auth-4.5.0-alpha1","dnsdist-1.7.0-alpha0","dnsdist-1.6.0-rc2","dnsdist-1.6.0-rc1","rec-4.6.0-alpha0","dnsdist-1.6.0-alpha3","rec-4.5.0-beta1","rec-4.5.0-alpha3","rec-4.5.0-alpha2","dnsdist-1.6.0-alpha2","dnsdist-1.6.0-alpha1","rec-4.5.0-alpha1","auth-4.5.0-alpha0","auth-4.4.0-beta1","dnsdist-1.6.0-alpha0","auth-4.4.0-alpha3","auth-4.4.0-alpha2","auth-4.4.0-alpha1","dnsdist-1.5.0","rec-4.5.0-alpha0","rec-4.4.0-beta1","rec-4.4.0-alpha2","dnsdist-1.5.0-rc4","dnsdist-1.5.0-rc3","dnsdist-1.5.0-rc2","rec-4.4.0-alpha1","dnsdist-1.5.0-rc1","dnsdist-1.5.0-alpha1","auth-4.3.0-beta2","rec-4.4.0-alpha0","auth-4.4.0-alpha0","auth-4.3.0-beta1","rec-4.3.0-beta1","auth-4.3.0-alpha1","dnsdist-1.4.0","dnsdist-1.4.0-rc5","rec-4.3.0-alpha3","rec-4.3.0-alpha2","dnsdist-1.4.0-rc4","dnsdist-1.4.0-rc3","rec-4.3.0-alpha1","dnsdist-1.4.0-rc2","dnsdist-1.4.0-rc1","auth-4.2.0-rc2","dnsdist-1.4.0-beta1","rec-4.2.0-rc1","rec-4.2.0-beta1","dnsdist-1.4.0-alpha2","dnsdist-1.4.0-alpha1","auth-4.2.0-rc1","dnsdist-1.3.3","auth-4.2.0-beta1","rec-4.2.0-alpha1","auth-4.2.0-alpha1","dnsdist-1.3.2","dnsdist-1.3.1","dnsdist-1.3.0","dnsdist-1.2.0","auth-4.1.0","rec-4.1.0","rec-4.1.0-rc3","auth-4.1.0-rc3","auth-4.1.0-rc2","rec-4.1.0-rc2","rec-4.1.0-rc1","auth-4.1.0-rc1","rec-4.1.0-alpha1","dnsdist-1.1.0","dnsdist-1.1.0-beta2","dnsdist-1.1.0-beta1","rec-4.0.2","rec-4.0.1","auth-4.0.1","rec-4.0.0","auth-4.0.0","auth-4.0.0-rc1","auth-4.0.0-rc2","rec-4.0.0-rc1","rec-4.0.0-beta1","auth-4.0.0-beta1","auth-4.0.0-alpha3","rec-4.0.0-alpha3","dnsdist-1.0.0","dnsdist-1.0.0-beta1","rec-4.0.0-alpha2","auth-4.0.0-alpha2","dnsdist-1.0.0-alpha2","auth-4.0.0-alpha1","rec-4.0.0-alpha1","dnsdist-1.0.0-alpha1","auth-3.4.0","auth-3.4.0-rc2","rec-3.6.0","auth-3.4.0-rc1","rec-3.5","rec-3.5-rc5","rec-3.5-rc4","rec-3.5-rc3","rec-3.5-rc1","auth-3.2-rc4","auth-3.2-rc3","auth-3.2-rc2","auth-3.2-rc1","auth-3.1-rc3","auth-3.1-rc2","auth-3.1-rc1","rec-3.3.1","rec-3.1.4","rec-3.0.1","rec-3-0-1","rec-3.0","rec-3-0"],"database_specific":{"vanir_signatures_modified":"2026-08-18T17:26:42Z","vanir_signatures":[{"target":{"file":"pdns/recursordist/recursor_cache.hh"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["3414123305728934674673560872746067470","64101788944131007705854300397802115599","80675656506297196043519785770337914010","182489539102832472064143413535030856557","258115070079075951832105962955253317438","102455799556652026046465596050330361409","66634926283702242556254941192503918648","40609170395090779703361349635509654676"]},"id":"CVE-2024-25590-0db03734","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e"},{"id":"CVE-2024-25590-0fca30a3","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/test-syncres_cc8.cc"},"deprecated":false,"digest":{"line_hashes":["149688647191929557926836092039672316138","184517274448688535326249839607475034259","213638317065629002624888250010229973608","103300825323056153166411498218906677951"],"threshold":0.9}},{"target":{"file":"pdns/uuid-utils.cc"},"deprecated":false,"digest":{"line_hashes":["49590830657678165528250752000205479820","191841617989050315147582688721281909190","259115177466232506890205916133033842087"],"threshold":0.9},"id":"CVE-2024-25590-3a3981d6","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/test-syncres_cc3.cc","function":"BOOST_AUTO_TEST_CASE"},"deprecated":false,"digest":{"function_hash":"305335240574864059203577485228953916198","length":1100},"id":"CVE-2024-25590-46358a8b"},{"target":{"file":"pdns/recursordist/rec-main.cc"},"deprecated":false,"digest":{"line_hashes":["60794374466687775158923788478520799363","176127964419103866721810524902190675532","121829292120933210502549120396118989495","92816815651313794479621008019734642379","243980717529146128040303129283558474385","253126806691238973887390123644163575373","181002444595453377260520815318456037708","113131884307018657277125850358912637608"],"threshold":0.9},"id":"CVE-2024-25590-554ee17e","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e"},{"deprecated":false,"digest":{"function_hash":"187801608706694548539116910224107805616","length":27205},"id":"CVE-2024-25590-6acdd4aa","signature_type":"Function","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/rec-main.cc","function":"initArgs"}},{"target":{"file":"pdns/recursordist/test-syncres_cc3.cc"},"deprecated":false,"digest":{"line_hashes":["180478540347986857583254448157490175364","224755860739872875770638335352424796443","288436739979549589692351440417763647805","22365933812626959307462702040553882163","231383572259156124415413672284390245832","333433467154961675914239718579197004571","128571794711502092427617620409020712998","109320462972409644585529333995500901700","81071967133501049837737265695180149773","120744664866596932500357648917117576558","93904541810071009361179674885054121994","5317571282827155344731241803085635442","95857692395829152442932225505891550331","136728979696859556017640397002214847860","156238206984524164643575475709338186143","18110459802514633504800420846651883802","274374139790523444937331937997930897855","233117170844996374304001375923763786091","134392673835383961972436849260920022013","289452466655563869119774009349525539874","230493995808097570175046120009385357709"],"threshold":0.9},"id":"CVE-2024-25590-7ab4f0ba","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e"},{"deprecated":false,"digest":{"line_hashes":["62853631870203618840480334366852339536","207966248931484848418473233672858331855","37935249810271821152242495146510005843","143706467489536381036242626132703123272"],"threshold":0.9},"id":"CVE-2024-25590-7f1beb5e","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/test-syncres_cc.cc"}},{"deprecated":false,"digest":{"length":3181,"function_hash":"285883787713832469742164816997763915583"},"id":"CVE-2024-25590-8bad8f32","signature_type":"Function","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/test-syncres_cc8.cc","function":"BOOST_AUTO_TEST_CASE"}},{"deprecated":false,"digest":{"function_hash":"183266419767969700558112295829184086912","length":2409},"id":"CVE-2024-25590-9bcda675","signature_type":"Function","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/recursor_cache.cc","function":"MemRecursorCache::doDump"}},{"signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/recursor_cache.cc"},"deprecated":false,"digest":{"line_hashes":["108525911895358519817874051642937088667","117369526404429690672470898306668874305","190511765747541335953364240177879202193","90949562681215680568030352439533250972","186118914476575663103152335644118879165","295198639662289736257513326354412030843","175111216416599413811262495528638248883","306595087978521055295360581249885666227","181304557566913713444288892646529309214","150293771667925484353492376824997119526","216929577896883042651977689307296768113","140514614359440731975829889727170897334","156257994182300124829568894695778313266","95430435370720377538466713102112559433","227246235031148576252960304327330942114","173471197535951019768388329773324695604","291961460363120843286560057008778057890","154213416000539962586792623582700588540","174018023089896622736510785027329621001","308993347017538729543137080666926960473","108333809648636550108848020263271164138","302283086660993946339744286960854591367","125863767296709287956726385087185167351","319589423612832280556496753311096705728","322028529766431679120360663257125578339","110455762873945356631444761172791309924","170995956256273644131767294504417450169","323024048001473663020295365652119218843","200660906791066263958423892391265081808","2554207092687878476937143467418299292","184326243487560615573091721338147880707","240381814806227943060718342560100303834","179839571088869846699446082664168534129","43700719790782033477746328791164766136","57928273528561685182198284904023464874","325375979742653663110708277940822978028","108333809648636550108848020263271164138","302283086660993946339744286960854591367","125863767296709287956726385087185167351","319589423612832280556496753311096705728","322028529766431679120360663257125578339","110455762873945356631444761172791309924","170995956256273644131767294504417450169","323024048001473663020295365652119218843","200660906791066263958423892391265081808","2554207092687878476937143467418299292","184326243487560615573091721338147880707","169463250232013542546768866015513980946","280690388020970223105143133370491270465","120962454662592718848046169918439693054","335988301124616507784701666442223860196","277148837134789746737131902329616001491","275936779897126657531017906887440163505","335583961435289089219576455452020343574","97560210651489059443247483513135125907","73863235305147186950784810629215853663","303231350081824778048689221093965835931","60707315367301197105990440219043715051","81861025863622339792785292482492636311","153790607994068015349071353311777130568","290071531260876129414143200143456763080","61740898623313020707926014062901284643","73659545098983391400367859097347036011","56455353253303996532199519837033945464"],"threshold":0.9},"id":"CVE-2024-25590-b2291c67","signature_type":"Line"},{"source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"function":"initSR","file":"pdns/recursordist/test-syncres_cc.cc"},"deprecated":false,"digest":{"function_hash":"110265368000169887870988860896119499096","length":3348},"id":"CVE-2024-25590-b6d0c120","signature_type":"Function","signature_version":"v1"},{"target":{"file":"pdns/recursordist/recursor_cache.cc"},"deprecated":false,"digest":{"line_hashes":["149977703169693183970481022797089936531","128800879354160129135192148672564007913","194495915763764426460250727679407693777","301358666311042758090520590971451344316","108333809648636550108848020263271164138","302283086660993946339744286960854591367","146485727435344565036667152563049843607","21473893049952292151124117765904740188","128387126165100483431975823158888248599","175913592699814803004011903524774806640","126464941360936261869796750946822632760","323024048001473663020295365652119218843","322343155045960585134841169695977094416","320963312289492138364242567080894622589","173213027477966697672281318542692063133","103778123790719189400834905417306033715","37268508562009860443609354301301880124","262138621126659433039107303462253244753","39375183591857516344602869033912555084","108333809648636550108848020263271164138","302283086660993946339744286960854591367","146485727435344565036667152563049843607","21473893049952292151124117765904740188","128387126165100483431975823158888248599","175913592699814803004011903524774806640","126464941360936261869796750946822632760","323024048001473663020295365652119218843","322343155045960585134841169695977094416","320963312289492138364242567080894622589","173213027477966697672281318542692063133","250583059997623998670205291640302319047","326218598847239084116976408860006675095","215297024700022141306993727489588481608","3074995750411330785293275916231266670"],"threshold":0.9},"id":"CVE-2024-25590-c17c52ca","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/9872469c75619fd857e63f31aab165e63a6dbec5"},{"digest":{"line_hashes":["149977703169693183970481022797089936531","128800879354160129135192148672564007913","194495915763764426460250727679407693777","301358666311042758090520590971451344316","108333809648636550108848020263271164138","302283086660993946339744286960854591367","146485727435344565036667152563049843607","21473893049952292151124117765904740188","128387126165100483431975823158888248599","175913592699814803004011903524774806640","126464941360936261869796750946822632760","323024048001473663020295365652119218843","322343155045960585134841169695977094416","320963312289492138364242567080894622589","173213027477966697672281318542692063133","103778123790719189400834905417306033715","37268508562009860443609354301301880124","262138621126659433039107303462253244753","39375183591857516344602869033912555084","108333809648636550108848020263271164138","302283086660993946339744286960854591367","146485727435344565036667152563049843607","21473893049952292151124117765904740188","128387126165100483431975823158888248599","175913592699814803004011903524774806640","126464941360936261869796750946822632760","323024048001473663020295365652119218843","322343155045960585134841169695977094416","320963312289492138364242567080894622589","173213027477966697672281318542692063133","250583059997623998670205291640302319047","326218598847239084116976408860006675095","215297024700022141306993727489588481608","3074995750411330785293275916231266670"],"threshold":0.9},"id":"CVE-2024-25590-d4b69dcf","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/49f201d641e75041a4cf51077df95579cb5ffb71","target":{"file":"pdns/recursordist/recursor_cache.cc"},"deprecated":false},{"target":{"file":"pdns/recursordist/test-recursorcache_cc.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["132751518075967949798555974808516245887","162038430184915042216680149976712492343","335389106611626687676500510628810000098","200595120998462151096392642166655419456","32531164410641691965967602202198545483","322163337906955670373963275428198616597","103578076632326157105912127839078178967","128732815190251385505382636283724577522","305089741668516325460919807758562619784","66402396706985785346072293059769435305"]},"id":"CVE-2024-25590-dee29b92","signature_type":"Line","signature_version":"v1","source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e"},{"source":"https://github.com/powerdns/pdns/commit/4775860c55ede7717e6e5702a90632cae5efd28e","target":{"file":"pdns/recursordist/test-recursorcache_cc.cc","function":"simple"},"deprecated":false,"digest":{"length":13336,"function_hash":"254523539017773487718771529321110958765"},"id":"CVE-2024-25590-f3946bd4","signature_type":"Function","signature_version":"v1"}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-25590.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}