CVE-2006-6931

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-16 · updated 2026-06-16

Description

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."

Affected products

Snort: through 2.6.2

References

http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html
http://secunia.com/advisories/23716
http://secunia.com/advisories/24164
http://secunia.com/advisories/24338
http://security.gentoo.org/glsa/glsa-200702-03.xml
http://securitytracker.com/id?1017508
http://www.acsac.org/2006/abstracts/54.html
http://www.acsac.org/2006/advance_program.html
http://www.acsac.org/2006/papers/54.pdf
http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf
http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip
http://www.mandriva.com/security/advisories?name=MDKSA-2007:051

Get alerted when CVE-2006-6931 or the next vulnerability affects your stack