The vulnerability allows a remote user to cause a denial of service. The vulnerability is caused due to an error when processing responses from the DNS north. A remote user using recursive response containing a specially crafted response DNAME, can cause errors in the file 'db.c' or 'resolver.c' and crash the application.

To correct install/update to BIND 9.9.9-P4, 9.10.4-P4, 9.11.0-P1.