CVE-2006-6931
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule...
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
Exploit likelihood
What each source reports
NVD Score used
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
CVE-2006-6931- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
CVE-2006-6931- Updated
- 2026-11-02
EUVDEUVD-2006-6914 No score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
EUVD-2006-6914- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxx2-77cj-f65h No score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule...
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
GHSA-xxx2-77cj-f65h- Updated
- 2026-11-02
OSV No score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
CVE-2006-6931- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6931 is a medium vulnerability (CVSS 5.0) in Snort, published January 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. No source names a fixed version.
References
securityfocus.com/bid/21991
cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip
lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html
secunia.com/advisories/24164
exchange.xforce.ibmcloud.com/vulnerabilities/31430
Show 13 moreShow less
osvdb.org/32096
securitytracker.com/id?1017508
security.gentoo.org/glsa/glsa-200702-03.xml
mandriva.com/security/advisories?name=MDKSA-2007:051
acsac.org/2006/advance_program.html
snort.org/pub-bin/snortnews.cgi
nvd.nist.gov/vuln/detail/CVE-2006-6931
github.com/advisories/GHSA-xxx2-77cj-f65h
security-tracker.debian.org/tracker/CVE-2006-6931