bind upstream has released a security advisory: https://kb.isc.org/article/AA-01272 9.9.7-P2 and 9.10.2-P3 have been released to fix this DoS issue. Reproducible: Always
*** This bug has been marked as a duplicate of bug 556150 ***