CVE-2015-2311: Integer Underflow
Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/capnprototo a version that resolves this vulnerability.Fixed in 0.7.0-7Fixed in 0.9.2-2Fixed in 1.0.1-4
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2311?
CVE-2015-2311 has a severity rating that indicates the potential for denial of service or exposure of sensitive information.
How do I fix CVE-2015-2311?
To fix CVE-2015-2311, upgrade Cap'n Proto to version 0.4.1.1 or 0.5.1.1 or later.
What software is affected by CVE-2015-2311?
CVE-2015-2311 affects versions of Cap'n Proto prior to 0.4.1.1 and 0.5.x before 0.5.1.1.
Can CVE-2015-2311 allow remote code execution?
Yes, CVE-2015-2311 may allow remote peers to execute arbitrary code through crafted messages.
What is the primary impact of CVE-2015-2311?
The primary impact of CVE-2015-2311 is the potential for denial of service or exposure of sensitive information from memory.