AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleGHSA-jchv-x857-q8fq

HTTP/2 Server Denial of Service Risks

Apple

Published Aug 13, 2019

High
Fix: upgrade to 1.5.0 or later
GitHub advisory

This is an umbrella advisory for a family of associated security releases. There are specific sub-advisories for each CVE.

Impact

Denial of service attack on HTTP/2 servers.

Patches

Available in 1.5.0.

Workarounds

There is no meaningful workaround without applying these patches.

Affected versions

PackageAffectedFixed in
swift-nio-http2
Product
>= 1.0.0, < 1.5.01.5.0
Details and references
Severity from
GitHub (reviewed advisory)

More Apple advisories

All Apple
MediumNov 25, 2019Executable StackCVE-2019-8849fixed in 2.4.1HighAug 13, 2019Apple: denial of serviceCVE-2019-9518fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9516fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9515fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9514fixed in 1.5.0HighAug 13, 2019Apple: denial of serviceCVE-2019-9512fixed in 1.5.0