{"id":"CVE-2019-8790","aliases":["EUVD-2019-18180","GHSA-5v59-m956-6fv5"],"status":"published","title":"This issue was addresses by updating incorrect URLSession file descriptors management logic to...","description":"This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00352,"percentile":0.29049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-922"],"published":"2020-10-27T19:49:20Z","modified":"2026-10-24T14:06:20Z","products":[{"vendor":"apple","product":"swift"},{"vendor":"apple","product":"swift for ubuntu"}],"references":[{"url":"https://support.apple.com/en-us/HT210647","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8790"},{"url":"https://github.com/advisories/GHSA-5v59-m956-6fv5"}],"sources":{"cve":[{"id":"CVE-2019-8790","description":"This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.","status":"published","published":"2020-10-27T19:49:20Z","modified":"2024-08-04T21:31:36.831Z","updated_at":"2026-11-02T14:20:21.703364Z"}],"euvd":[{"id":"EUVD-2019-18180","description":"This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.","status":"published","published":"2020-10-27T19:49:20Z","modified":"2024-08-04T21:31:36Z","updated_at":"2026-11-03T03:06:41.543253Z"}],"ghsa":[{"id":"GHSA-5v59-m956-6fv5","title":"This issue was addresses by updating incorrect URLSession file descriptors management logic to...","description":"This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.","status":"published","published":"2022-05-24T17:32:23Z","modified":"2023-01-29T05:04:17Z","cwes":["CWE-922"],"updated_at":"2026-11-02T14:45:31.23097Z"}],"nvd":[{"id":"CVE-2019-8790","description":"This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.","status":"published","published":"2020-10-27T20:15:19.627Z","modified":"2026-06-17T02:42:37.287Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:05:48.502374Z"}],"osv":[{"id":"CVE-2019-8790","description":"This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.","status":"published","published":"2020-10-27T20:15:19.627Z","modified":"2026-10-24T14:06:20.983304014Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:12.974481Z"}]}}
