It was discovered that malformed DNSSEC records within a DNS zone could
result in denial of service against PDNS Recursor, a resolving
name server.

https://security-tracker.debian.org/tracker/DSA-5626-1

Read More