Sandstorm Cap'n Proto up to 0.4.1.0/0.5.1.0 Incomplete Fix totalSize Application resource consumption

Summaryinfo

A vulnerability, which was classified as problematic, has been found in Sandstorm Cap'n Proto up to 0.4.1.0/0.5.1.0. This vulnerability affects the function totalSize of the component Incomplete Fix. Performing a manipulation as part of Application results in resource consumption. This vulnerability is identified as CVE-2015-2313. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Sandstorm Cap'n Proto up to 0.4.1.0/0.5.1.0. This affects the function totalSize of the component Incomplete Fix. The manipulation as part of a Application leads to a resource consumption vulnerability. CWE is classifying the issue as CWE-400. The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. This is going to have an impact on availability. The summary by CVE is:

Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an object reader, allows remote peers to cause a denial of service (CPU consumption) via a crafted small message, which triggers a "tight" for loop. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-2312.

The bug was discovered 03/17/2015. The weakness was released 08/09/2017 (oss-sec). The advisory is shared at openwall.com. This vulnerability is uniquely identified as CVE-2015-2313 since 03/17/2015. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1499 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 876 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 0.4.1.1 or 0.5.1.1 eliminates this vulnerability.

Entries connected to this vulnerability are available at VDB-105138, VDB-105139 and VDB-105140. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Sandstorm

Name

• Cap'n Proto

Version

• 0.4.0
• 0.4.1.0
• 0.5.0
• 0.5.1.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion