CVE-2015-2311
CriticalSummary
An integer underflow in Sandstorm Cap'n Proto before version 0.4.1.1 and 0.5.x before 0.5.1.1 may allow remote peers to cause a denial of service or potentially obtain sensitive information from memory or execute arbitrary code via a crafted message.
Risk Assessment
The organization may be exposed to attacks that lead to service outages or leakage of sensitive data, which could result in serious legal and reputational consequences.
Recommendation
It is recommended to update Sandstorm Cap'n Proto to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.