Back to Database
Status published
High
CVE-2015-2312
Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows...
Vulnerability Description
Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption) via a list with a large number of elements.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-2312
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/capnproto/capnproto/commit/104870608fde3c698483fdef6b97f093fc15685d
- http://www.openwall.com/lists/oss-security/2015/03/17/3
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780567
- https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-2-all-cpu-amplification.md
More from capnproto
View All →CVE-2023-48230
Cap'n Proto WebSocket message can cause crash
Medium
5.9
CVE-2022-46149
Cap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list.
Medium
5.4
CVE-2017-7892
Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to...
High
7.5
CVE-2015-2313
Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when...
High
7.5
CVE-2015-2311
Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x...
Critical
9.8
Affected Vendor
capnproto
View all reports →Affected Software
capnproto
Vulnerable Versions:
0, 0.5.0.0, 0.5.1.0
Timeline
Official Publish:
August 9th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.