PowerDNS Recursor CVE-2025-30192

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:42 vuln.today

DescriptionCVE.org

Alpine Linux: pdns-recursor fixed in 5.2.5-r0

AnalysisAI

PowerDNS Recursor (pdns-recursor) on Alpine Linux received a security fix in Alpine package version 5.2.5-r0, addressing CVE-2025-30192. The nature of the vulnerability - including its attack vector, impact class, and affected component - is not disclosed in the available intelligence data. No CVSS score, CWE classification, or vendor security advisory beyond the Alpine Linux fix notice has been identified at time of analysis. EPSS exploitation probability is low at 0.12% (30th percentile), and no public exploit code or CISA KEV listing has been identified.

Technical ContextAI

PowerDNS Recursor (pdns-recursor) is a high-performance, recursive DNS resolver widely deployed in enterprise and ISP environments. It is packaged for Alpine Linux, a minimal Linux distribution commonly used in containerized and embedded deployments. The specific root cause class (CWE) of this vulnerability is not available in the provided data - no CVSS vector or CWE identifier was reported. The fix is confirmed as part of the Alpine Linux package 5.2.5-r0, suggesting the upstream PowerDNS project issued a patch that was subsequently packaged by Alpine maintainers. Without a CWE or technical description, the underlying flaw class (e.g., memory corruption, logic error, input validation failure) cannot be determined from available intelligence.

Affected ProductsAI

The affected product is pdns-recursor (PowerDNS Recursor) as packaged for Alpine Linux. The fix was introduced in Alpine package version 5.2.5-r0, implying all prior Alpine Linux pdns-recursor package versions are potentially affected. Exact upstream PowerDNS Recursor version mapping and affected version ranges prior to the fix are not confirmed from the available data. No CPE strings were provided. Administrators should consult the Alpine Linux security tracker and the PowerDNS upstream security advisories for precise version scope.

RemediationAI

Upgrade the pdns-recursor Alpine Linux package to version 5.2.5-r0 or later by running the standard Alpine package manager update: 'apk upgrade pdns-recursor'. This is the vendor-confirmed fix. If upgrading immediately is not feasible and the instance is internet-facing, consider restricting access to the DNS resolver to known client IP ranges via firewall rules to reduce exposure surface - note this may impact legitimate resolution clients. Consult the Alpine Linux security advisories at https://security.alpinelinux.org and the PowerDNS upstream changelog for additional technical guidance. No workaround details are available from the provided intelligence data.