---
title: PowerDNS Recursor Security Advisory 2024-04
description: PowerDNS Security Advisory 2024-04 Security Release of PowerDNS Recursor 4.9.9, 5.0.9 and 5.1.2.
---

[PowerDNS Blog ](https://blog.powerdns.com)

# [PowerDNS Recursor Security Advisory 2024-04](https://blog.powerdns.com/2024/10/03/powerdns-recursor-4-9-9-5-0-9-5-1-2-released)

 Written by [Otto Moerbeek](https://blog.powerdns.com/author/otto-moerbeek) | Oct 3, 2024 11:51:07 AM

Today we have released PowerDNS Recursor 4.9.9, 5.0.9 and 5.1.2.

These releases fix PowerDNS Security Advisory 2024-04: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor.

### PowerDNS Security Advisory 2024-04: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor

```
CVE: CVE-2024-25590Date: 3rd of October 2024.Affects: PowerDNS Recursor up to and including 4.9.8, 5.0.8 and 5.1.1Not affected: PowerDNS Recursor 4.9.9, 5.0.9 and 5.1.2Severity: HighImpact: Denial of serviceExploit: This problem can be triggered by an attacker publishing a crafted zoneRisk of system compromise: NoneSolution: Upgrade to patched version
```

 

An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and caching results for these sets can lead to a denial of service.

CVSS Score: 7.5, see [CVSS Calculator](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H&version=3.1)

The remedy is: upgrade to a patched version.

We would like to thank Toshifumi Sakaguchi for bringing this issue to our attention and assisting in validating the patches.

Please refer to the changelogs  ([4.9.9](https://doc.powerdns.com/recursor/changelog/4.9.html#change-4.9.9),[ 5.0.9](https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.9), [5.1.2](https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.2)) and upgrade [guide](https://docs.powerdns.com/recursor/upgrade.html) for additional details.

Please send us all feedback and issues you might have via the [mailing list](https://mailman.powerdns.com/mailman/listinfo/pdns-users), or in case of a bug, via [GitHub](https://github.com/PowerDNS/pdns/issues/new/choose).

The tarballs ([4.9.9](https://downloads.powerdns.com/releases/pdns-recursor-4.9.9.tar.bz2), [5.0.9](https://downloads.powerdns.com/releases/pdns-recursor-5.0.9.tar.bz2), [5.1.2](https://downloads.powerdns.com/releases/pdns-recursor-5.1.2.tar.bz2)) (with signature files [4.9.9](https://downloads.powerdns.com/releases/pdns-recursor-4.9.9.tar.bz2.sig), [5.0.9](https://downloads.powerdns.com/releases/pdns-recursor-5.0.9.tar.bz2.sig), [5.1.2](https://downloads.powerdns.com/releases/pdns-recursor-5.1.2.tar.bz2.sig)) are available from our download [server](https://downloads.powerdns.com/releases/) and packages for several distributions are available from our [repository](https://repo.powerdns.com/).

We are grateful to the PowerDNS community for the reporting of bugs, issues, feature requests, and especially to the submitters of fixes and implementations of features.

 

[View full post](https://blog.powerdns.com/2024/10/03/powerdns-recursor-4-9-9-5-0-9-5-1-2-released)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Otto Moerbeek"
  },
  "dateModified" : "2024-11-05T10:06:24.334Z",
  "datePublished" : "2024-10-03T11:51:07Z",
  "headline" : "PowerDNS Recursor Security Advisory 2024-04",
  "image" : {
    "@type" : "ImageObject",
    "height" : 540,
    "url" : "https://20334960.fs1.hubspotusercontent-na1.net/hubfs/20334960/PowerDNS_recursor_release_blog.png",
    "width" : 1008
  },
  "mainEntityOfPage" : "https://blog.powerdns.com/2024/10/03/powerdns-recursor-4-9-9-5-0-9-5-1-2-released",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "PowerDNS Blog"
  }
}
```