CVE-2006-6931: Medium severity Snort Snort vulnerability
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6931?
CVE-2006-6931 is considered a moderate severity vulnerability due to its potential to cause denial of service through CPU exhaustion.
How do I fix CVE-2006-6931?
To fix CVE-2006-6931, upgrade Snort to version 2.6.3 or later, which addresses the algorithmic complexity vulnerability.
What kind of attack does CVE-2006-6931 facilitate?
CVE-2006-6931 facilitates a backtracking attack that can lead to increased CPU consumption and potential detection outage.
Which versions of Snort are affected by CVE-2006-6931?
Snort versions prior to 2.6.3 are affected by CVE-2006-6931.
What is the impact of exploiting CVE-2006-6931?
Exploiting CVE-2006-6931 can result in a denial of service, preventing Snort from effectively detecting network threats.