CVE-2015-2310

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation...

CVE-2015-2311

CVE-2015-2311 affects Sandstorm Cap'n Proto prior to 0.4.1.1 and 0.5.x prior to 0.5.1.1. The issue is an integer underflow in the handling of crafted messages, which may allow remote peers to cause denial of service, leak memory, or potentially execute arbitrary code. Physical impact and exploit ...

CVE-2015-2313

CVE-2015-2313 affects Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2. The vulnerability occurs when an application calls the totalSize method on an object reader, allowing remote peers to cause a denial of service (CPU consumption) via a crafted small message that triggers a tight ...

CVE-2015-2312

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service CPU and possibly general resource consumption via a list with a large number of elements...

CVE-2015-2311

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message...

CVE-2015-2312

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service CPU and possibly general resource consumption via a list with a large number of elements...

CVE-2015-2312

Cap'n Proto (Sandstorm Cap'n Proto) vulnerable in versions before 0.4.1.1 and 0.5.x before 0.5.1.1. A remote attacker can cause denial of service by sending a message containing a list with a very large number of elements, leading to CPU/general resource exhaustion. A related CVE-2015-2313 indica...

CVE-2015-2310

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation...

CVE-2015-2313

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service CPU consumption via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists...

CVE-2015-2310

Summary (CVE-2015-2310) : An integer overflow in Sandstorm Cap'n Proto’s layout.c++ causes a vulnerability when processing crafted messages. Affected versions are Cap'n Proto prior to 0.4.1.1 and 0.5.x prior to 0.5.1.1. The flaw, related to pointer validation, can allow remote peers to trigger a ...

CVE-2015-2310

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation...

CVE-2015-2311

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message...

Out-of-bounds

Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a...

CVE-2017-7892

Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a...