Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: capnproto Clear all filters
TI-2023-26094 CVE-2023-48230

Cap'n Proto WebSocket message can cause crash

Priority MEDIUM 46

Cap'n Proto is a data interchange format and capability-based RPC system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01888 Published 2023-11-21 Fixed in 1.0.1.1 CWE-124
TI-2015-02039 CVE-2015-2313 · GHSA-8f67-f75m-fxfm

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application…

Priority LOW 37

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service (CPU consumption) via a crafted small…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01887 Published 2017-08-09 No fix listed CWE-400
TI-2015-02037 CVE-2015-2311 · GHSA-w3xw-rq95-8jcw

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might…

Priority MEDIUM 47

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0254 Published 2017-08-09 No fix listed CWE-191
TI-2015-02036 CVE-2015-2310 · GHSA-f93h-h245-gfpc

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before…

Priority MEDIUM 43

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message,…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01803 Published 2017-08-09 No fix listed CWE-190