Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-8849 EUVD-2022-3826GHSA-frg3-gpcx-968f

SwiftNIO SSL arbitrary code execution vulnerability

Published Dec 18, 2019 · Updated Aug 4, 2024 · Assigned by apple

Description

The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1. A SwiftNIO application using TLS may be able to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Apple Swift-Ubuntu unspecified – < SwiftNIO SSL 2.4.1 SwiftNIO SSL 2.4.1

Affected packages

EcosystemPackageAffectedFixedRecord
SwiftURL github.com/apple/swift-nio-ssl >= 2.0.0, < 2.4.1 2.4.1 GHSA-frg3-gpcx-968f

References