FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

zeek -- Various vulnerabilities

Affected packages
		zeek	<	3.0.10

Details

VuXML ID	2c92fdd3-896c-4a5a-a0d8-52acee69182d
Discovery	2020-08-28
Entry	2020-09-09

Jon Siwek of Corelight reports:

This release fixes the following security issue:

The AYIYA and GTPv1 parsing/decapsulation logic may leak memory -- These leaks have potential for remote exploitation to cause Denial of Service via resource exhaustion.

[source]

References

URL	https://github.com/zeek/zeek/releases/tag/v3.0.10