AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleGHSA-crcg-r874-885f

Apple: denial of service

Apple

CVE-2019-9518 · Published Aug 13, 2019

High
Fix: upgrade to 1.5.0 or later
GitHub advisory

Impact

Denial of service attack on HTTP/2 servers.

Patches

Available in 1.5.0.

Workarounds

There is no meaningful workaround without upgrading.

Affected versions

PackageAffectedFixed in
swift-nio-http2
Product
>= 1.0.0, < 1.5.01.5.0
Details and references
Severity from
GitHub (reviewed advisory)

More Apple advisories

All Apple
MediumNov 25, 2019Executable StackCVE-2019-8849fixed in 2.4.1HighAug 13, 2019Apple: denial of serviceCVE-2019-9516fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9515fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9514fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9512fixed in 1.5.0HighAug 13, 2019HTTP/2 Server Denial of Service RisksGHSA-jchv-x857-q8fqfixed in 1.5.0