CVE-2020-9861: A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input.

high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
apple	swift	<= 5.1.4	—
ckeditor	ckeditor	>= 0 < 4.5.7+dfsg-2ubuntu0.18.04.1	4.5.7+dfsg-2ubuntu0.18.04.1
ckeditor	ckeditor	>= 0 < 4.12.1+dfsg-1ubuntu0.1	4.12.1+dfsg-1ubuntu0.1
ckeditor	ckeditor	>= 0 < 4.5.7+dfsg-2ubuntu0.16.04.1~esm1	4.5.7+dfsg-2ubuntu0.16.04.1~esm1
swift	swift_5.1.5_for_linux	>= unspecified < Swift 5.1.5 for Linux	Swift 5.1.5 for Linux

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

osv6.1MEDIUM