CyberRota Analysis
AI-GeneratedNIOWebSocket-based servers, including those using Vapor and Hummingbird frameworks, are vulnerable to a denial-of-service attack that allows an unauthenticated remote peer to crash the server by sending a specific 11-byte frame after the WebSocket handshake. This results in the termination of all active connections, requiring a server restart to restore functionality. Organizations utilizing these frameworks should prioritize patching to version 2.101.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)