Zeek vulnerabilities
We track 2 vulnerabilities in Zeek products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Zeek vulnerabilities
- 7.5 High severity
zeek: NULL Pointer Dereference
Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR message with error-code 25 (KDC_ERR_PREAUTH_REQUIRED) containi
- 7.5 High severity
zeek: Allocation of Resources Without Limits or Throttling
Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending a crafted FTP control session negotiating AUTH GSSAPI followed by a large ADAT