I think the first vulnerability could also lead to a DoS if they point the server to its own lookup route? Also sad to see how Microsoft is treating security r

I think the first vulnerability could also lead to a DoS if they point the server to its own lookup route? Also sad to see how Microsoft is treating security researchers, instead of thanking them with a small bug bounty. Especially for the one (or maybe two) DoS vulns