Insufficient validation of delegation information could lead to cache pollution in PDNS Recursor, a resolving name server. The changes required to address this are too extensive to backport to the version of PDNS Recursor included in the oldstable distribution (bookworm).