Unbound before 1.9.5 allows an out-of-bounds write via a compressed name in rdata_copy.

By admin