FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2026-02-11 07:54:38 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
8173e68a-88f3-4862-882c-6e58779d98e7	zeek -- potential DoS vulnerability Tim Wojtulewicz of Corelight reports: Zeek's HTTP analyzer can be tricked into interpreting Transfer-Encoding or Content-Length headers set in MIME entities within HTTP bodies and change the analyzer behavior. Discovery 2026-01-29 Entry 2026-01-29 zeek < 8.0.6 https://github.com/zeek/zeek/releases/tag/v8.0.6
50fd6a75-0587-4987-bef2-bb933cd78ea1	zeek -- information leak vulnerability Tim Wojtulewicz of Corelight reports: The KRB analyzer can leak information about hosts in analyzed traffic via external DNS lookups. Discovery 2025-10-13 Entry 2025-10-13 zeek < 8.0.2 https://github.com/zeek/zeek/releases/tag/v8.0.2

VuXML ID

Description

8173e68a-88f3-4862-882c-6e58779d98e7

zeek -- potential DoS vulnerability

Tim Wojtulewicz of Corelight reports:

Zeek's HTTP analyzer can be tricked into interpreting Transfer-Encoding or Content-Length headers set in MIME entities within HTTP bodies and change the analyzer behavior.

Discovery 2026-01-29
Entry 2026-01-29
zeek

< 8.0.6

https://github.com/zeek/zeek/releases/tag/v8.0.6

50fd6a75-0587-4987-bef2-bb933cd78ea1

zeek -- information leak vulnerability

Tim Wojtulewicz of Corelight reports:

The KRB analyzer can leak information about hosts in analyzed traffic via external DNS lookups.

Discovery 2025-10-13
Entry 2025-10-13
zeek

< 8.0.2

https://github.com/zeek/zeek/releases/tag/v8.0.2