A response from ISC:

Rate Limits in BIND 9 Effective vs. DNSBomb Vulnerability (https://www.isc.org/blogs/2024-dnsbomb/)

> We have been researching and testing a DNS vulnerability report called the DNSBomb (CVE-2024-33655). After extensive testing, we have concluded that this technique does not pose a significant threat to BIND 9 operators.