Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: zeek 8.0.9 Clear all filters
TI-2026-42831 CVE-2026-60109 · GHSA-76hq-67jv-x5j7

Zeek < 8.0.9 Null Pointer Dereference DoS via Kerberos KRB_ERROR Parsing

Priority MEDIUM 45

Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-cod…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00923 Published 2026-07-09 Fixed in 8.0.9 CWE-476
TI-2026-42830 CVE-2026-60108 · GHSA-r3q8-ccf6-4xhj

Zeek < 8.0.9 Uncontrolled Memory Consumption DoS via FTP Analyzer

Priority MEDIUM 45

Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending a crafted FTP control session negotiati…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00793 Published 2026-07-09 Fixed in 8.0.9 CWE-770