A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A crafted response from an upstream server the recursor has been configured to forward-recurse to can     cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use     recursive forwarding and is not affected. (CVE-2024-25583)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A crafted response from an upstream server the recursor has been configured to forward-recurse to can
    cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use
    recursive forwarding and is not affected. (CVE-2024-25583)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2024:0114-1 advisory.

  - A crafted response from an upstream server the recursor has been configured to forward-recurse to can     cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use     recursive forwarding and is not affected. (CVE-2024-25583)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1af16f2b-023c-11ef-8791-6805ca2fa271 advisory.

  - A crafted response from an upstream server the recursor has been configured to forward-recurse to can     cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use     recursive forwarding and is not affected. (CVE-2024-25583)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5674 advisory.

  - A crafted response from an upstream server the recursor has been configured to forward-recurse to can     cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use     recursive forwarding and is not affected. (CVE-2024-25583)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
249665	Linux Distros Unpatched Vulnerability : CVE-2024-25583	Nessus	Misc.	high
426071	Alpine: multiple pdns-recursor packages: security update to 5.0.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426071	Alpine: multiple pdns-recursor packages: security update to 5.0.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
194746	openSUSE 15 Security Update : pdns-recursor (openSUSE-SU-2024:0114-1)	Nessus	SuSE Local Security Checks	high
194480	FreeBSD : powerdns-recursor -- denial of service (1af16f2b-023c-11ef-8791-6805ca2fa271)	Nessus	FreeBSD Local Security Checks	high
408384	Alpine: multiple pdns-recursor packages: security update to 4.9.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
408384	Alpine: multiple pdns-recursor packages: security update to 4.9.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
193900	Debian dsa-5674 : pdns-recursor - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2024-25583

high

Tenable Plugins

high

high

high

high

high

high

high

high