Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.
No PoCs from references.
- https://github.com/dns-differential-fuzzing/dns-differential-fuzzing