Ran across this edge-case when trying to deploy BlueCat + Cisco Umbrella integration. This bug does modify the ARCOUNT, but more importantly, it modifies it without updating the UDP checksum. Packets are rejected as soon as they arrive at a DNS serve...