CVE-2015-2310: Integer Overflow
Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/capnprototo a version that resolves this vulnerability.Fixed in 0.7.0-7Fixed in 0.9.2-2Fixed in 1.0.1-4
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2310?
CVE-2015-2310 has a severity rating that indicates it can lead to denial of service or sensitive information exposure.
How do I fix CVE-2015-2310?
To fix CVE-2015-2310, upgrade to Cap'n Proto version 0.4.1.1 or any version higher than 0.5.1.1.
What systems are affected by CVE-2015-2310?
CVE-2015-2310 affects Cap'n Proto versions prior to 0.4.1.1 and versions in the 0.5.x series before 0.5.1.1.
Can CVE-2015-2310 allow attackers to access sensitive information?
Yes, CVE-2015-2310 could potentially allow remote peers to obtain sensitive information from memory.
What type of vulnerability is CVE-2015-2310?
CVE-2015-2310 is an integer overflow vulnerability that results from improper pointer validation.