« Volver al listado

CVE-2025-59029

Estado: AnalizadaMedia (5.3)—

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Powerdns — Recursor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-59029",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-59029",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-12-09T14:29:51.430262Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@open-xchange.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@open-xchange.com",
      "affectedData": [
        {
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "modules": [
            "Record cache"
          ],
          "product": "Recursor",
          "versions": [
            {
              "status": "affected",
              "version": "5.3.0",
              "lessThan": "5.3.2",
              "versionType": "semver"
            }
          ],
          "packageName": "pdns-recursor",
          "programFiles": [
            "recursor_cache.cc"
          ],
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-12-09T16:17:58.990",
  "references": [
    {
      "url": "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-07.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@open-xchange.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@open-xchange.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-617"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY."
    }
  ],
  "lastModified": "2026-06-17T09:45:27.817",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:5.3.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60EB1FF6-8039-4F08-B943-13DFC479433B"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:5.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C2B07F4-3564-444F-AD04-26B956E06EB3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@open-xchange.com"
}