Back to Database
Status published
Critical
CVE-2015-2310
Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1...
Vulnerability Description
Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-2310
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-0-c%2B%2B-integer-overflow.md
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780565
- http://www.openwall.com/lists/oss-security/2015/03/17/3
- https://github.com/capnproto/capnproto/commit/f343f0dbd0a2e87f17cd74f14186ed73e3fbdbfa
More from capnproto
View All →CVE-2023-48230
Cap'n Proto WebSocket message can cause crash
Medium
5.9
CVE-2022-46149
Cap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list.
Medium
5.4
CVE-2017-7892
Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to...
High
7.5
CVE-2015-2313
Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when...
High
7.5
CVE-2015-2312
Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows...
High
7.5
Affected Vendor
capnproto
View all reports →Affected Software
capnproto
Vulnerable Versions:
0, 0.5.0
Timeline
Official Publish:
August 9th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.