Description
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
References
- 21991 vdb-entry
- http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip
- [dailydave] 20070110 Algorithmic Bugs mailing-list
- 24164 third-party-advisory
- 24338 third-party-advisory
- snort-rule-matching-dos(31430) vdb-entry
- 32096 vdb-entry
- 23716 third-party-advisory
- 1017508 vdb-entry
- GLSA-200702-03 vendor-advisory
- http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf
- MDKSA-2007:051 vendor-advisory
- http://www.acsac.org/2006/advance_program.html
- http://www.acsac.org/2006/papers/54.pdf
- http://www.acsac.org/2006/abstracts/54.html
- http://www.snort.org/pub-bin/snortnews.cgi