FreeBSD Security Advisory – Very large RRSIG RRsets included in a negative response can trigger an assertion failure that will crash named(8) due to an off-by-one error in a buffer size check.
Source: FreeBSD Security Advisory – BIND Remote Denial Of Service
