ISC BIND 9.x before 9.9.9-P2 9.10.x before 9.10.4-P2 and 9.11.x before 9.11.0b2 when lwresd or the named lwres option is enabled allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.