FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

zeek -- information leak vulnerability

Affected packages
zeek < 8.0.2

Details

VuXML ID 50fd6a75-0587-4987-bef2-bb933cd78ea1
Discovery 2025-10-13
Entry 2025-10-13

Tim Wojtulewicz of Corelight reports:

The KRB analyzer can leak information about hosts in analyzed traffic via external DNS lookups.

References

URL https://github.com/zeek/zeek/releases/tag/v8.0.2