...there's a ton of CVEs in regards to the parser code. SANS ISC has a summary here.
Probably best to dump any version below 4.9.0 when looking at traffic from unknown sources.
Probably best to dump any version below 4.9.0 when looking at traffic from unknown sources.