CVE-2015-2310

Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service or possibly obtain sensitive information from memory via a crafted message, related to pointer validation.

• CWE-190

• http://www.openwall.com/lists/oss-security/2015/03/17/3Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780565Mailing List, Third Party Advisory
• https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-0-c%2B%2B-integer-overflow.mdThird Party Advisory
• https://github.com/capnproto/capnproto/commit/f343f0dbd0a2e87f17cd74f14186ed73e3fbdbfaThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/03/17/3Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780565Mailing List, Third Party Advisory
• https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-0-c%2B%2B-integer-overflow.mdThird Party Advisory
• https://github.com/capnproto/capnproto/commit/f343f0dbd0a2e87f17cd74f14186ed73e3fbdbfaThird Party Advisory

Published

Aug 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2301Use-after-free vulnerability in the phar_rename_archive func…
• CVE-2015-2302Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2303Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2304Absolute path traversal vulnerability in bsdcpio in libarchi…
• CVE-2015-2305Integer overflow in the regcomp implementation in the Henry …
• CVE-2015-2308Eval injection vulnerability in the HttpCache class in HttpK…
• CVE-2015-2311Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 an…
• CVE-2015-2312Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.…
• CVE-2015-2313Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.…
• CVE-2015-2314SQL injection vulnerability in the WPML plugin before 3.1.9 …
• CVE-2015-2315Cross-site scripting (XSS) vulnerability in the WPML plugin …
• CVE-2015-2316The utils.html.strip_tags function in Django 1.6.x before 1.…