CVE-2018-14629 dns: fix CNAME loop prevention using counter regression