CVE-2006-6931

Published: Jan 16, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."

Affected (1)

Products: Snort: Snort

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Snort Snort	Up to 2.6.2

References (32)

http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html

Source: cve@mitre.org

http://secunia.com/advisories/23716

Source: cve@mitre.org

http://secunia.com/advisories/24164

Source: cve@mitre.org

http://secunia.com/advisories/24338

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200702-03.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017508

Source: cve@mitre.org

http://www.acsac.org/2006/abstracts/54.html

Source: cve@mitre.org

http://www.acsac.org/2006/advance_program.html

Source: cve@mitre.org

http://www.acsac.org/2006/papers/54.pdf

Source: cve@mitre.org

Vendor Advisory

http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf

Source: cve@mitre.org

Vendor Advisory

http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:051

Source: cve@mitre.org

http://www.osvdb.org/32096

Source: cve@mitre.org

http://www.securityfocus.com/bid/21991

Source: cve@mitre.org

http://www.snort.org/pub-bin/snortnews.cgi

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/31430

Source: cve@mitre.org

http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23716

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24164

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24338

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200702-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017508

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.acsac.org/2006/abstracts/54.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.acsac.org/2006/advance_program.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.acsac.org/2006/papers/54.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:051

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/32096

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21991

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.snort.org/pub-bin/snortnews.cgi

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/31430

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.