Skip to main content

Swift CVE-2020-9861

HIGH
Uncontrolled Recursion (CWE-674)
2020-11-02 product-security@apple.com
Buffer Overflow Swift
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 02, 2020 - 23:15 nvd
HIGH 7.5

DescriptionNVD

A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input.

AnalysisAI

A stack overflow issue existed in Swift for Linux. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-674. A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input. Affected products include: Apple Swift.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Swift

View all
CVE-2012-4406 CRITICAL
9.8 Oct 22

OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing

CVE-2017-16613 CRITICAL
9.8 Nov 21

An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1
CVE-2023-26154 MEDIUM POC
5.9 Dec 06

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubn
CVE-2018-4220 HIGH
8.8 Jun 08

An issue was discovered in certain Apple products. Rated high severity (CVSS 8.8), this vulnerability is remotely exploi
CVE-2026-71190 HIGH
8.7 Aug 05

Remote unauthenticated denial of service in OpenStack Swift through 2.38.0 allows any network-reachable attacker to exha
CVE-2016-0738 HIGH
7.5 Jan 29

OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close serv
CVE-2016-0737 HIGH
7.5 Jan 29

OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers

CVE-2022-32389 HIGH
7.5 Jul 14

Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. Rated high severity (CVSS 7.
CVE-2022-1642 HIGH
7.5 Jun 16

A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious

CVE-2026-49017 HIGH
7.1 May 27

Denial of service in OpenStack Swift's s3api middleware allows an authenticated S3 API user to permanently hang proxy-se
CVE-2026-71191 MEDIUM
6.0 Aug 05

OpenStack Swift's S3API middleware through version 2.38.0 fails to enforce SigV4 signature coverage over semantic x-amz-
CVE-2026-71192 MEDIUM
6.0 Aug 05

Cross-tenant object exfiltration in OpenStack Swift through 2.38.0 allows authenticated S3 API users to bypass source-ob

Same weakness CWE-674 – Uncontrolled Recursion

View all
CVE-2019-9545 HIGH POC
8.8
CVE-2019-9543 HIGH POC
8.8
CVE-2019-9144 HIGH POC
8.8
CVE-2019-9143 HIGH POC
8.8
CVE-2026-9769 HIGH POC
8.7
CVE-2026-40345 HIGH POC
8.2
CVE-2025-9624 HIGH POC
8.3
CVE-2019-9192 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Share

CVE-2020-9861 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy