VDB
CVE-2006-6931
CVE-2006-6931
PUBLISHED
CVSS 5 MEDIUM
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
EPSS 2.45% · 84.3th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
2.45%
84.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| snort | snort | 0 |
Timeline
- Jan 16, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 1, 2022 CVE Updated
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Jun 20, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
References
- 21991 vdb
- 24164 third-party-advisory
- 24338 third-party-advisory
- http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf url
- MDKSA-2007:051 vendor-advisory
- http://www.acsac.org/2006/papers/54.pdf url
- http://www.acsac.org/2006/abstracts/54.html url
- http://www.snort.org/pub-bin/snortnews.cgi url
- http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip url
- [dailydave] 20070110 Algorithmic Bugs mailing-list
- snort-rule-matching-dos(31430) vdb
- 32096 vdb
- 23716 third-party-advisory
- 1017508 vdb
- GLSA-200702-03 vendor-advisory
- http://www.acsac.org/2006/advance_program.html url
- https://nvd.nist.gov/vuln/detail/CVE-2006-6931 advisory