snort: denial of service
| Package(s): | snort | CVE #(s): | CVE-2006-6931 | ||||||||
| Created: | February 14, 2007 | Updated: | March 1, 2007 | ||||||||
| Description: | From the Gentoo advisory: Randy Smith, Christian Estan and Somesh Jha discovered that the rule matching algorithm of Snort can be exploited in a way known as a "backtracking attack" to perform numerous time-consuming operations. Version 2.6.1.2 contains the fix. | ||||||||||
| Alerts: |
| ||||||||||