CVE-2019-12175: Zeek

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS because a case-type index is mishandled.

Affected products

• Zeek Zeek: before 2.6.2 (fixed in 2.6.2)

Published 2019-07-17. Last modified 2026-06-17.