A single crafted TKEY query can crash the BIND named daemon on unpatched 9.9.x and 9.10.x servers, knocking out DNS resolution or authority with no login required.