CVE-2015-2310
CriticalSummary
Integer overflow in layout.c++ in Sandstorm Cap'n Proto before version 0.4.1.1 and 0.5.x before version 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.
Risk Assessment
Organizations may be exposed to denial of service and leakage of sensitive data, which can lead to serious information security consequences.
Recommendation
It is recommended to update Sandstorm Cap'n Proto to the latest version to mitigate this vulnerability and conduct a security audit of systems using this application.
Original NVD description (English source)
Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.