PowerDNS Recursor CVE-2025-59029

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:42 vuln.today

DescriptionCVE.org

Alpine Linux: pdns-recursor fixed in 5.3.1-r1

AnalysisAI

PowerDNS Recursor (pdns-recursor) on Alpine Linux contains an uncharacterized vulnerability addressed in Alpine package version 5.3.1-r1. The nature, impact class, and attack surface of this vulnerability are not disclosed in available intelligence sources. With an EPSS score of 0.01% (1st percentile), exploitation probability is assessed as extremely low at this time. No active exploitation or public proof-of-concept has been identified.

Technical ContextAI

pdns-recursor is PowerDNS's recursive DNS resolver, responsible for resolving DNS queries on behalf of clients by iterating through authoritative name servers. It is widely deployed in enterprise and ISP environments. The Alpine Linux package designation 5.3.1-r1 indicates the upstream PowerDNS Recursor version is 5.3.1 with Alpine-specific packaging revision 1. No CWE classification is available to characterize the root cause vulnerability class. No CPE strings were provided to further scope affected configurations. The vulnerability context - whether it affects DNS query processing, zone handling, cache logic, or an auxiliary component - cannot be determined from available data.

Affected ProductsAI

Affected product is pdns-recursor (PowerDNS Recursor) as packaged for Alpine Linux. The fix appears in Alpine package version 5.3.1-r1, implying that prior Alpine package versions of pdns-recursor are affected. The exact upstream version range and affected Alpine Linux branches (e.g., edge, 3.x) are not specified in available data. No CPE strings were provided. Administrators should consult the Alpine Linux security advisory tracker and the PowerDNS upstream security advisories for authoritative version scope.

RemediationAI

Upgrade the pdns-recursor Alpine Linux package to version 5.3.1-r1 or later using the standard Alpine package manager: 'apk upgrade pdns-recursor'. This is the vendor-confirmed fix per Alpine Linux security reporting. No specific workarounds are documented in available data. Because the vulnerability type is unknown, compensating controls cannot be precisely scoped - generic DNS hardening such as restricting recursor access to trusted client IP ranges (allow-from ACL) and disabling unnecessary features may reduce exposure but have not been confirmed as mitigations for this specific issue. Consult the PowerDNS upstream advisory (powerdns.com/security-advisories) and Alpine Linux security tracker for additional guidance once further details are published.