Deadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved.
https://maradns.samiam.org/changelog.html
https://github.com/samboy/MaraDNS/security/advisories/GHSA-cfc6-vhrv-62cj