[Snort-users] Snort Advisory 2006-09-27

Snort Releases snortreleases at ...950...
Wed Sep 27 17:55:07 EDT 2006

Snort Advisory
Date: 2006-09-27

Sourcefire is aware of an issue in Snort that can produce segmentation 
faults in certain circumstances.  This issue occurs when Snort is 
handling a large number of sessions and the configuration item 
cache_clean_percent is set to anything other than 0.

Open-source Snort users who have not manually modified the default 
configuration for stream4 are unaffected by this issue.  Only users who 
have added the cache_clean_percent option to their stream4 configuration 
are affected. They should change their configuration to use the 
parameter cache_clean_sessions instead.

The latest CVS source downloads for the Snort 2.6.1, 2.6.0, and 2.4 
branches now contain a fix for this issue.  The next version of Snort 
will contain this fix. Thanks to Eric Hines from Applied Watch for 
reporting the issue.

More information about the Snort-users mailing list