CVE-2015-2311

Опубликовано: 09 авг. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.

Ссылки

http://www.openwall.com/lists/oss-security/2015/03/17/3
Mailing List
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780566
Mailing List
Third Party Advisory
https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.md
Third Party Advisory
https://github.com/capnproto/capnproto/commit/26bcceda72372211063d62aab7e45665faa83633
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/03/17/3
Mailing List
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780566
Mailing List
Third Party Advisory
https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.md
Third Party Advisory
https://github.com/capnproto/capnproto/commit/26bcceda72372211063d62aab7e45665faa83633
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:capnproto:capnproto:*:*:*:*:*:*:*:*

Версия до 0.4.1.0 (включая)

cpe:2.3:a:capnproto:capnproto:0.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:capnproto:capnproto:0.5.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01055

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-191

Связанные уязвимости

CVE-2015-2311

CVSS3: 9.8

ubuntu

больше 8 лет назад

CVE-2015-2311

CVSS3: 9.8

debian

больше 8 лет назад

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x be ...

GHSA-w3xw-rq95-8jcw

CVSS3: 9.8

github

больше 3 лет назад

EPSS

Процентиль: 77%

0.01055

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-191