CVE-2019-8790

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%

exploitation probability

0.4%top 74% of all CVEs

observed exploitation

nono source reports it

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.

Affected products

Apple · Swift for Ubuntu

References

https://support.apple.com/en-us/HT210647