CVE-2015-2311

Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.

• CWE-191

• http://www.openwall.com/lists/oss-security/2015/03/17/3Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780566Mailing List, Third Party Advisory
• https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.mdThird Party Advisory
• https://github.com/capnproto/capnproto/commit/26bcceda72372211063d62aab7e45665faa83633Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/03/17/3Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780566Mailing List, Third Party Advisory
• https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-1-c%2B%2B-integer-underflow.mdThird Party Advisory
• https://github.com/capnproto/capnproto/commit/26bcceda72372211063d62aab7e45665faa83633Third Party Advisory

Published

Aug 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2302Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2303Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2304Absolute path traversal vulnerability in bsdcpio in libarchi…
• CVE-2015-2305Integer overflow in the regcomp implementation in the Henry …
• CVE-2015-2308Eval injection vulnerability in the HttpCache class in HttpK…
• CVE-2015-2310Integer overflow in layout.c++ in Sandstorm Cap'n Proto befo…9.1
• CVE-2015-2312Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.…
• CVE-2015-2313Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.…
• CVE-2015-2314SQL injection vulnerability in the WPML plugin before 3.1.9 …
• CVE-2015-2315Cross-site scripting (XSS) vulnerability in the WPML plugin …
• CVE-2015-2316The utils.html.strip_tags function in Django 1.6.x before 1.…
• CVE-2015-2317The utils.http.is_safe_url function in Django before 1.4.20,…