Nixpkgs Security Tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Details of issue NIXPKGS-2025-0023

NIXPKGS-2025-0023
published on 15 Dec 2025
Permalink CVE-2025-59030
updated 1 month, 2 weeks ago by @fricklerhandwerk Activity log
  • Created automatic suggestion 1 month, 2 weeks ago
  • @fricklerhandwerk accepted 1 month, 2 weeks ago
  • @fricklerhandwerk published on GitHub 1 month, 2 weeks ago
Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor

An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP.

Affected products

pdns-recursor
  • <5.3.3
  • <5.2.7
  • <5.1.9

Matching in nixpkgs

Package maintainers