8000 Issues · zeek/zeek · GitHub

Repository navigation

Issues

Upcoming patch release bug fixes
#724 · jsiwek opened on Jan 3, 2020
6

I wanna join your community
zeek/zeek#6064 · opened on Nov 7, 2026
DNP3: the analyzer does not apply the pseudo-transport FIR and sequence rules
zeek/zeek#6060 · opened on Nov 6, 2026
Zeek 9.0.1 fails to start on Debian 13 with libpcap 1.10.5 when capturing on the 'any' interface
zeek/zeek#6047 · opened on Nov 3, 2026 · 9.0.2
3
Intermittent test failure in Zeek v9: scripts.policy.protocols.conn.known-services
zeek/zeek#6045 · opened on Nov 2, 2026
Modbus: a TCP gap inside an ADU silently stops request parsing
zeek/zeek#6038 · opened on Nov 2, 2026
DNP3: one lost TCP segment can stop DNP3 analysis for the rest of the connection
zeek/zeek#6037 ·
DNP3: a link-layer-only frame (LENGTH 5) silently drops the frames that follow it
zeek/zeek#6033 · opened on Nov 2, 2026
Allow users to redef the lookup tables in analyzers' consts.zeek
zeek/zeek#6031 · opened on Nov 2, 2026
DNS analyzer: No weird raised on RFC-violating NXDOMAIN responses with non-CNAME Answer RRs, and no BIF event for unknown/experimental EDNS(0) options
zeek/zeek#6028 · opened on Nov 1, 2026
DNS: Missing dns_CAA_reply handler in base/protocols/dns/main.zeek leaves answers, TTLs, rtt, AA, and RA unset in dns.log for all CAA responses
zeek/zeek#6027 · opened on Nov 1, 2026
bloomfilter_clear + bloomfilter_merge block the event loop in proportion to capacity; merge clones the bit vector
zeek/zeek#6021 · opened on Oct 29, 2026
8
SMB1 named-pipe transactions all share one DCE-RPC analyzer, misattributing RPC interface in dce_rpc.log
zeek/zeek#6025 · opened on Oct 28, 2026
DNP3: policy script to flag traffic whose meaning depends on the outstation's link-layer recovery policy?
zeek/zeek#6009 · opened on Oct 24, 2026
9
pcapng options parser: heap OOB read in vendored LightPcapNg (remaining_size += should be -=) — SIGSEGV on zeek -r
zeek/zeek#5986 · opened on Oct 15, 2026
2
Zeek fails to work out of the box when on TLSv1.3-only systems; or systems without anonymous ciphers; or systems without SHA1
zeek/zeek#5979 · opened on Oct 15, 2026
4
HTTP: Forward embedded NTLM and Kerberos tokens to analyzers
Enhancement
zeek/zeek#5971 · opened on Oct 13, 2026
DHCPv6 analyzer additions
zeek/zeek#5947 · opened on Oct 7, 2026 · 10.0
3
CCI: Ideas for reducing usage (Windows/sanitizer builds)
Enhancement
zeek/zeek#5944 · opened on Oct 5, 2026
pcapng IDB branch reads 8 bytes from a zero-size allocation (block_total_length = 12) — SHB's bytesToRead < 16 guard missing for IDB/SPB
zeek/zeek#5938 · opened on Oct 4, 2026
3
pcapng SPB block_total_length underflow in LightPcapNg (actual_len = total_length - 16 without check) — ~4 GB memcpy from an empty buffer, SIGSEGV on zeek -r
zeek/zeek#5937 · opened on Oct 4, 2026
3
SQLite log writer should sanitize its table name
Bug
zeek/zeek#5933 · opened on Sep 30, 2026
1
Input framework hang with empty record_separator
Bug
zeek/zeek#5931 · opened on Sep 30, 2026
1
x509_from_der segfaults with invalid input
Bug
zeek/zeek#5927 · opened on Sep 30, 2026
3
Investigate switching to high-resolution timers on Windows
Bug
zeek/zeek#5921 · opened on Sep 25, 2026
SSH: in-auth EXT_INFO leaves failed password attempts UNKNOWN in ssh.log
Enhancement
zeek/zeek#5917 · opened on Sep 24, 2026
2

0