---
title: PowerDNS DNSdist 1.9.10 released, fixing CVE-2025-30193
description: PowerDNS DNSdist 1.9.10 released
---

[PowerDNS Blog ](https://blog.powerdns.com)

# [PowerDNS DNSdist 1.9.10 released, fixing CVE-2025-30193](https://blog.powerdns.com/2025/05/20/powerdns-dnsdist-1.9.10-released)

 Written by [Remi Gacogne](https://blog.powerdns.com/author/rgacogne) | May 20, 2025 11:14:55 AM

We released PowerDNS DNSdist 1.9.10 today, fixing several bugs including a security issue tracked as CVE-2025-30193 where a remote, unauthenticated attacker can cause a denial of service via a crafted TCP connection. The issue was reported to us via our public IRC channel so once it was clear that the issue had a security impact we prepared to release a new version as soon as possible.

While we advise upgrading to a fixed version, a work-around is to temporarily restrict the number of queries that DNSdist is willing to accept over a single incoming TCP connection, via the *setMaxTCPQueriesPerConnection* directive. Setting it to 50 is a safe choice that does not impact performance in our tests.

Other fixes include:

- On FreeBSD, only pass source addresses on sockets bound to *ANY*
- Limit number of proxy protocol-enabled outgoing TCP connections
- Fix cache lookup for unavailable TCP-only backends
- Fix memory corruption when using *getAddressInfo*
- Only set the proxy protocol payload size when actually added

Please see the DNSdist [website](https://dnsdist.org/) for the [changelog](https://dnsdist.org/changelog.html#change-1.9.10) and the current documentation.

Please send us all feedback and issues you might have via the [mailing list](https://mailman.powerdns.com/mailman/listinfo/dnsdist), or in case of a bug, via [GitHub](https://github.com/PowerDNS/pdns/issues/new/choose).

The release [tarball](https://downloads.powerdns.com/releases/dnsdist-1.9.10.tar.bz2) and its [signature](https://downloads.powerdns.com/releases/dnsdist-1.9.10.tar.bz2.sig) are available on the downloads website, and packages for several distributions are available from our [repository](https://repo.powerdns.com/).

 

[View full post](https://blog.powerdns.com/2025/05/20/powerdns-dnsdist-1.9.10-released)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Remi Gacogne"
  },
  "dateModified" : "2025-07-21T13:13:08.968Z",
  "datePublished" : "2025-05-20T11:14:55Z",
  "headline" : "PowerDNS DNSdist 1.9.10 released, fixing CVE-2025-30193",
  "image" : {
    "@type" : "ImageObject",
    "height" : 540,
    "url" : "https://20334960.fs1.hubspotusercontent-na1.net/hubfs/20334960/PowerDNS_dnsdist_release_blog.png",
    "width" : 1008
  },
  "mainEntityOfPage" : "https://blog.powerdns.com/2025/05/20/powerdns-dnsdist-1.9.10-released",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "PowerDNS Blog"
  }
}
```