Spoofing Vulnerability in PowerDNS Recursor by PowerDNS

CVE-2025-30192

What is CVE-2025-30192?

A vulnerability exists in PowerDNS Recursor that allows attackers to exploit ECS enabled requests, resulting in greater success rates for spoofing attempts compared to non-ECS enabled queries. The recent update implements multiple mitigations to counteract these spoofing attempts. These include enhanced validation of responses and the introduction of a configuration setting, outgoing.edns_subnet_harden, which strengthens the security of outgoing ECS queries, making it significantly harder for malicious actors to succeed.

References