Cap'n Proto 'src/capnp/layout.c++' Denial of Service Vulnerability
BID:73127
Info
Cap'n Proto 'src/capnp/layout.c++' Denial of Service Vulnerability
| Bugtraq ID: | 73127 |
| Class: | Design Error |
| CVE: |
CVE-2015-2312 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 28 2015 12:00AM |
| Updated: | Feb 28 2015 12:00AM |
| Credit: | Ben Laurie |
| Vulnerable: |
Sandstorm.io Cap'n Proto 0.4.1 |
| Not Vulnerable: |
Sandstorm.io Cap'n Proto 0.5.1.1 Sandstorm.io Cap'n Proto 0.4.1.1 |
Solution / Fix
Cap'n Proto 'src/capnp/layout.c++' Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cap'n Proto 'src/capnp/layout.c++' Denial of Service Vulnerability
References:
References:
- Cap�??n Proto Home Page (capnproto)
- SECURITY: CPU usage amplification attack. (Sandstorm)
- CPU usage amplification attack. (Sandstorm)
- Debian Bug report logs - #780567 CPU usage amplification attack (Debian)