GitHub Advisoryadvisory · SwiftURL

GHSA-frg3-gpcx-968f SwiftNIO SSL arbitrary code execution vulnerability

CRITICAL Published 2022-05-24 Modified 2025-08-04 Official page ↗
Aliases
CVE-2019-8849
Ecosystem
SwiftURL
Packages
github.com/apple/swift-nio-ssl
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed
2023-06-06

Affected packages

• SwiftURL github.com/apple/swift-nio-ssl: >= 2.0.0, < 2.4.1 → fixed in 2.4.1

Description

A SwiftNIO application using TLS may be able to execute arbitrary code. The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1.

Related

Alias · CVE (1)

  • CVE-2019-8849 The issue was addressed by signaling that an executable stack is not required. vulnerability

References