CVE-2006-6931

Publication date 16 January 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."

Status

Package Ubuntu Release Status
snort 9.10 karmic
Fixed 2.7.0-2ubuntu1
9.04 jaunty
Fixed 2.7.0-2ubuntu1
8.10 intrepid
Fixed 2.7.0-2ubuntu1
8.04 LTS hardy
Fixed 2.7.0-2ubuntu1
7.10 gutsy
Fixed 2.7.0-2ubuntu1
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references

Access our resources on patching vulnerabilities