AppleGHSA-crcg-r874-885f

Apple: denial of service

HighCVE-2019-9518 · Published Aug 13, 2019

### Impact Denial of service attack on HTTP/2 servers. ### Patches Available in 1.5.0. ### Workarounds There is no meaningful workaround without upgrading.

GitHub advisory

Affected versions

Package	Affected	Fixed in
swift-nio-http2 Product	>= 1.0.0, < 1.5.0	1.5.0

Details and references

Severity from: GitHub (reviewed advisory)

More Apple advisories

Date	Advisory	Severity	Fixed in
Nov 252019	Executable Stack MediumNov 25, 2019 CVE-2019-88492.4.1	Medium	2.4.1
Aug 132019	Apple: denial of service HighAug 13, 2019 CVE-2019-95161.5.0	High	1.5.0
Aug 132019	Apple: denial of service HighAug 13, 2019 CVE-2019-95151.5.0	High	1.5.0
Aug 132019	Apple: denial of service HighAug 13, 2019 CVE-2019-95141.5.0	High	1.5.0
Aug 132019	Apple: denial of service HighAug 13, 2019 CVE-2019-95121.5.0	High	1.5.0
Aug 132019	HTTP/2 Server Denial of Service Risks HighAug 13, 2019 GHSA-jchv-x857-q8fq1.5.0	High	1.5.0

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.