CVE-2006-6931

描述

Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."

如何修補 CVE-2006-6931

要修補 CVE-2006-6931,請將受影響套件升級到下列已修補版本。

• Debian/snort—升級至 2.7.0-1 或更新版本

CVE-2006-6931 正在被利用嗎?

低 — EPSS 為 2.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 2.7.0-1

參考連結(17)

• ADVISORYsecunia.com/advisories/23716
• ADVISORYsecunia.com/advisories/24164
• ADVISORYsecunia.com/advisories/24338
• ADVISORYsecurity.gentoo.org/glsa/glsa-200702-03.xml
• ADVISORYwww.acsac.org/2006/papers/54.pdf