A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.
1.0.0~alpha2-11.9.10-11.9.10-1ubuntu0.11.9.8-11.9.10-12.0.1-12.0.2-12.0.2-1build11.2.0-11.2.0-31.2.1-11.2.1-1build11.2.1-1ubuntu0.1~esm11.4.0-11.4.0-1build11.4.0-1build21.4.0-1ubuntu0.1~esm11.4.0~rc3-11.5.1-3build21.6.1-1build11.6.1-1ubuntu0.1~esm11.6.1-1ubuntu0.1~esm21.8.0-11.8.2-11.8.2-21.8.2-31.8.3-11.8.3-21.8.3-2build11.8.3-2build21.8.3-2ubuntu0.1~esm1Exploitability
AV:AAC:HPR:NUI:NScope
S:UImpact
C:NI:NA:LCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L