CVE-2006-6931
- Source
- https://cve.org/CVERecord?id=CVE-2006-6931
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2006-6931.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2006-6931
- Withdrawn
- 2024-08-08T09:48:42.691342Z
- Published
- 2007-01-16T23:28:00Z
- Modified
- 2024-06-30T12:01:22Z
- Summary
- [none]
- Details
-
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- References
-
- http://secunia.com/advisories/23716
- http://secunia.com/advisories/24164
- http://secunia.com/advisories/24338
- http://security.gentoo.org/glsa/glsa-200702-03.xml
- http://www.acsac.org/2006/papers/54.pdf
- http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:051
- http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html
- http://securitytracker.com/id?1017508
- http://www.acsac.org/2006/abstracts/54.html
- http://www.acsac.org/2006/advance_program.html
- http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip
- http://www.osvdb.org/32096
- http://www.securityfocus.com/bid/21991
- http://www.snort.org/pub-bin/snortnews.cgi
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31430
- https://security-tracker.debian.org/tracker/CVE-2006-6931
Affected packages
Debian:11 / snort
Package
- Name
- snort
- Purl
- pkg:deb/debian/snort?arch=source