CVE-2015-2312: High severity capnproto capnproto vulnerability
Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption) via a list with a large number of elements.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/capnprototo a version that resolves this vulnerability.Fixed in 0.7.0-7Fixed in 0.9.2-2Fixed in 1.0.1-4
Event History
Frequently Asked Questions
What is the severity of CVE-2015-2312?
CVE-2015-2312 is classified as a denial of service vulnerability.
How do I fix CVE-2015-2312?
To fix CVE-2015-2312, upgrade to Cap'n Proto version 0.4.1.1 or later, or 0.5.1.1 or later.
What software is affected by CVE-2015-2312?
CVE-2015-2312 affects versions of Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1.
What types of attacks are possible with CVE-2015-2312?
CVE-2015-2312 allows remote peers to cause a denial of service through excessive CPU and resource consumption.
Is CVE-2015-2312 related to a specific version of Debian?
Yes, CVE-2015-2312 can affect the Cap'n Proto package in specific versions of Debian.