What is GHSA-frg3-gpcx-968f?

GHSA-frg3-gpcx-968f is a security advisory published by GitHub Security Advisories with Critical severity. SwiftNIO SSL arbitrary code execution vulnerability

Which CVE IDs does GHSA-frg3-gpcx-968f cover?

GHSA-frg3-gpcx-968f covers the following CVE IDs: CVE-2019-8849. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-frg3-gpcx-968f?

GHSA-frg3-gpcx-968f has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-frg3-gpcx-968f?

GHSA-frg3-gpcx-968f affects 1 product, including: swift/github.com/apple/swift-nio-ssl:\u003e= 2.0.0, \u003c 2.4.1.

GHSA-frg3-gpcx-968fCriticalCVSS 9.8

SwiftNIO SSL arbitrary code execution vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

August 5, 2025

🔗 CVE IDs covered (1)

CVE-2019-8849 →

📋 Description

A SwiftNIO application using TLS may be able to execute arbitrary code. The issue was addressed by signaling that an executable stack is not required. This issue is fixed in SwiftNIO SSL 2.4.1.

🎯 Affected products1

swift/github.com/apple/swift-nio-ssl:>= 2.0.0, < 2.4.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-8849
https://support.apple.com/HT210772
https://github.com/apple/swift-nio-ssl/commit/109faef770994e71b6bafcc015e2e96b88a4af8c
https://github.com/apple/swift-nio-ssl/releases/tag/2.4.1
https://security.snyk.io/vuln/SNYK-COCOAPODS-SWIFTNIOSSL-8492737
https://github.com/advisories/GHSA-frg3-gpcx-968f