This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2015-2311 →
DEBIAN-CVE-2015-2311
Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly o...
Original description
The description as published by the source.
Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
capnproto
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-3"}]}]
Debian:13
capnproto
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-3"}]}]
Debian:14
capnproto
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.1-3"}]}]
References
- advisory security-tracker.debian.org