ISC BIND contains a flaw in DNS64 that may allow a remote denial of service. The issue is triggered when handling 'AAAA' record queries for an 'A' record rewrite rule in a Response Policy Zone (RPZ). With a specially crafted query, a remote attacker can cause an assertion failure and terminate a named process.