CVE-2006-6931
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule...
CVE-2006-6931 is a medium vulnerability (CVSS 5.0) in Snort, published January 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.45%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
Exploit likelihood
Affected products
What each source reports
NVD Score used
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
CVE-2006-6931- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
CVE-2006-6931- Updated
- 2026-11-02
EUVDEUVD-2006-6914No score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
EUVD-2006-6914- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxx2-77cj-f65hNo score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule...
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
GHSA-xxx2-77cj-f65h- Updated
- 2026-11-02
OSVNo score
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
- Record
CVE-2006-6931- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/21991
cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip
lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html
secunia.com/advisories/24164
exchange.xforce.ibmcloud.com/vulnerabilities/31430
Show 13 moreShow less
osvdb.org/32096
securitytracker.com/id?1017508
security.gentoo.org/glsa/glsa-200702-03.xml
mandriva.com/security/advisories?name=MDKSA-2007:051
acsac.org/2006/advance_program.html
snort.org/pub-bin/snortnews.cgi
nvd.nist.gov/vuln/detail/CVE-2006-6931
github.com/advisories/GHSA-xxx2-77cj-f65h
security-tracker.debian.org/tracker/CVE-2006-6931