TI-2021-18391 CVE-2021-41732 · GHSA-82p3-37jm-2r8w
An issue was discovered in zeek version 4.1.0.
Priority HIGH 75
An issue was discovered in zeek version 4.1.0.
zeek
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
zeek records in CISA KEVNo zeek vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-42831 CVE-2026-60109 · GHSA-76hq-67jv-x5j7
Zeek < 8.0.9 Null Pointer Dereference DoS via Kerberos KRB_ERROR Parsing
Priority MEDIUM 45
Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-cod…
TI-2026-42830 CVE-2026-60108 · GHSA-r3q8-ccf6-4xhj
Zeek < 8.0.9 Uncontrolled Memory Consumption DoS via FTP Analyzer
Priority MEDIUM 45
Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending a crafted FTP control session negotiati…
TI-2019-09093 CVE-2019-12175 · GHSA-m47c-xm2p-2v99
In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer…
Priority LOW 36
In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS because a case-type index is mishandled.