git: 82751f61c4a9 - main - security/vuxml: Document powerdns-recursor multiple vulnerabilities
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 31 Oct 2025 03:23:14 UTC
The branch main has been updated by tagattie:
URL: https://cgit.FreeBSD.org/ports/commit/?id=82751f61c4a9bd00e7fe76411841689b10a76593
commit 82751f61c4a9bd00e7fe76411841689b10a76593
Author: Ralf van der Enden <tremere@cainites.net>
AuthorDate: 2025-10-31 03:21:08 +0000
Commit: Hiroki Tagato <tagattie@FreeBSD.org>
CommitDate: 2025-10-31 03:21:08 +0000
security/vuxml: Document powerdns-recursor multiple vulnerabilities
PR: 290563
Reported by: Ralf van der Enden <tremere@cainites.net>
Obtained from: https://blog.powerdns.com/powerdns-security-advisory-2025-06-2025-10-22
---
security/vuxml/vuln/2025.xml | 30 ++++++++++++++++++++++++++++++
1 file changed, 30 insertions(+)
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 08750876b8a4..e5be717ee640 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,33 @@
+ <vuln vid="c4fb21e4-b579-11f0-871c-6805ca2fa271">
+ <topic>powerdns-recursor -- cache pollution</topic>
+ <affects>
+ <package>
+ <name>powerdns_recursor</name>
+ <range><lt>5.3.0</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>PowerDNS Team reports:</p>
+ <blockquote cite="https://blog.powerdns.com/powerdns-security-advisory-2025-06-2025-10-22">
+ <p>It has been brought to our attention that the Recursor does not
+ apply strict enough validation of received delegation information.
+ The malicious delegation information can be sent by an attacker
+ spoofing packets.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-59023</cvename>
+ <cvename>CVE-2025-59024</cvename>
+ <url>https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-06.html</url>
+ </references>
+ <dates>
+ <discovery>2025-10-15</discovery>
+ <entry>2025-10-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="7c09fcb7-b5d6-11f0-b3f7-a8a1599412c6">
<topic>chromium -- multiple security fixes</topic>
<affects>