CVE-2015-2312

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and possibly general resource consumption) via a list with a large number of elements.

• CWE-400

• http://www.openwall.com/lists/oss-security/2015/03/17/3Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780567Mailing List, Third Party Advisory
• https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-2-all-cpu-amplification.mdThird Party Advisory
• https://github.com/capnproto/capnproto/commit/104870608fde3c698483fdef6b97f093fc15685dThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/03/17/3Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780567Mailing List, Third Party Advisory
• https://github.com/capnproto/capnproto/blob/master/security-advisories/2015-03-02-2-all-cpu-amplification.mdThird Party Advisory
• https://github.com/capnproto/capnproto/commit/104870608fde3c698483fdef6b97f093fc15685dThird Party Advisory

Published

Aug 9, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2303Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-2304Absolute path traversal vulnerability in bsdcpio in libarchi…
• CVE-2015-2305Integer overflow in the regcomp implementation in the Henry …
• CVE-2015-2308Eval injection vulnerability in the HttpCache class in HttpK…
• CVE-2015-2310Integer overflow in layout.c++ in Sandstorm Cap'n Proto befo…9.1
• CVE-2015-2311Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 an…
• CVE-2015-2313Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.…
• CVE-2015-2314SQL injection vulnerability in the WPML plugin before 3.1.9 …
• CVE-2015-2315Cross-site scripting (XSS) vulnerability in the WPML plugin …
• CVE-2015-2316The utils.html.strip_tags function in Django 1.6.x before 1.…
• CVE-2015-2317The utils.http.is_safe_url function in Django before 1.4.20,…
• CVE-2015-2318The TLS stack in Mono before 3.12.1 allows man-in-the-middle…