Unbound < 1.5.9 daemon/remote.c Diffie-Hellman Key Exchange Value Small Subgroup Confinement Attack Vulnerability
Low Nessus Plugin ID 106381
Synopsis
The remote name server is affected by a key confinement attack vulnerability.
Description
According to its self-reported version number, the remote Unbound DNS resolver contains a flaw in the handling of Diffie-Hellman key exchange values that can allow a remote attacker to perform a small subgroup confinement attack.
Solution
Upgrade to Unbound version 1.5.9 or later.