Skip to content
OpenAdvisories

Vendor

zeek

2 known vulnerabilities.

Products

zeek 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-60109

    Zeek < 8.0.9 Null Pointer Dereference DoS via Kerberos KRB_ERROR Parsing

    Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAUTH_REQUIRED) contain…

    zeek zeek
  • High 7.5
    CVE-2026-60108

    Zeek < 8.0.9 Uncontrolled Memory Consumption DoS via FTP Analyzer

    Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending a crafted FTP control session negotiating AUTH GSSAPI followed by a large ADAT…

    zeek zeek