An \incorrect assumption\ in the authvalidated validator function in BIND 9.3.0 when DNSSEC is enabled allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.