CVE-2024-25583 - Vulnerability Details - OpenCVE

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Powerdns	Powerdns

No data.

No data.

References

Link	Providers
http://www.openwall.com/lists/oss-security/2024/04/24/1
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html

History

Thu, 13 Feb 2025 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Powerdns Powerdns powerdns
CPEs		cpe:2.3:a:powerdns:powerdns::::::::
Vendors & Products		Powerdns Powerdns powerdns
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 13 Feb 2025 17:45:00 +0000

Type	Values Removed	Values Added
Description	A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.	A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.

MITRE

Status: PUBLISHED

Assigner: OX

Published: 2024-04-25T09:45:05.220Z

Updated: 2025-02-13T17:40:49.994Z

Reserved: 2024-02-08T08:15:37.204Z

Link: CVE-2024-25583

Vulnrichment

Updated: 2024-08-01T23:44:09.678Z

NVD

Status : Awaiting Analysis

Published: 2024-04-25T10:15:08.867

Modified: 2025-02-13T18:17:14.370

Link: CVE-2024-25583

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-25583", "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981", "state": "PUBLISHED", "assignerShortName": "OX", "dateReserved": "2024-02-08T08:15:37.204Z", "datePublished": "2024-04-25T09:45:05.220Z", "dateUpdated": "2025-02-13T17:40:49.994Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://repo.powerdns.com/", "defaultStatus": "unaffected", "modules": ["resolver"], "packageName": "pdns-recursor", "product": "Recursor", "repo": "https://github.com/PowerDNS/pdns", "vendor": "PowerDNS", "versions": [{"status": "affected", "version": "4.8.7"}, {"status": "affected", "version": "4.9.4"}, {"status": "affected", "version": "5.0.3"}]}], "datePublic": "2024-04-24T09:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.</p>"}], "value": "A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected."}], "impacts": [{"capecId": "CAPEC-25", "descriptions": [{"lang": "en", "value": "CAPEC-25 Forced Deadlock"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981", "shortName": "OX", "dateUpdated": "2024-05-01T17:09:19.889Z"}, "references": [{"url": "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html"}, {"url": "http://www.openwall.com/lists/oss-security/2024/04/24/1"}], "source": {"discovery": "INTERNAL"}, "title": "Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured"}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-25583", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-29T19:14:51.254409Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*"], "vendor": "powerdns", "product": "powerdns", "versions": [{"status": "affected", "version": "4.8.7"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*"], "vendor": "powerdns", "product": "powerdns", "versions": [{"status": "affected", "version": "4.9.4"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*"], "vendor": "powerdns", "product": "powerdns", "versions": [{"status": "affected", "version": "5.0.3"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:35:23.421Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:44:09.678Z"}, "title": "CVE Program Container", "references": [{"url": "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2024/04/24/1", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2024/04/24/1", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:44:09.678Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-25583", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-29T19:14:51.254409Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*"], "vendor": "powerdns", "product": "powerdns", "versions": [{"status": "affected", "version": "4.8.7"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*"], "vendor": "powerdns", "product": "powerdns", "versions": [{"status": "affected", "version": "4.9.4"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*"], "vendor": "powerdns", "product": "powerdns", "versions": [{"status": "affected", "version": "5.0.3"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-29T19:14:19.106Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured", "source": {"discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-25", "descriptions": [{"lang": "en", "value": "CAPEC-25 Forced Deadlock"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/PowerDNS/pdns", "vendor": "PowerDNS", "modules": ["resolver"], "product": "Recursor", "versions": [{"status": "affected", "version": "4.8.7"}, {"status": "affected", "version": "4.9.4"}, {"status": "affected", "version": "5.0.3"}], "packageName": "pdns-recursor", "collectionURL": "https://repo.powerdns.com/", "defaultStatus": "unaffected"}], "datePublic": "2024-04-24T09:00:00.000Z", "references": [{"url": "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html"}, {"url": "http://www.openwall.com/lists/oss-security/2024/04/24/1"}], "descriptions": [{"lang": "en", "value": "A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.", "supportingMedia": [{"type": "text/html", "value": "<p>A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981", "shortName": "OX", "dateUpdated": "2024-05-01T17:09:19.889Z"}}}, "cveMetadata": {"cveId": "CVE-2024-25583", "state": "PUBLISHED", "dateUpdated": "2025-02-13T17:40:49.994Z", "dateReserved": "2024-02-08T08:15:37.204Z", "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981", "datePublished": "2024-04-25T09:45:05.220Z", "assignerShortName": "OX"}, "dataVersion": "5.1"}