It was discovered that malformed DNSSEC records within a DNS zone could
result in denial of service against Knot Resolver, a caching, DNSSEC-
validating DNS resolver.

https://security-tracker.debian.org/tracker/DSA-5633-1

Read More