CVE-2015-2313

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to…

published August 9, 2017

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service (CPU consumption) via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-2312.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01887 · 79.4th percentile
Published
2017-08-09T18:00Z
EPSS history
Timeline
  • 09 AUG 18:00Z
    Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to…
    cvelistv5