Integer underflow in Sandstorm Capn Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a denial of service or possibly obtain sensitive information from memory or execute arbitrary code via a crafted message.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Capnproto | Capnproto | * | 0.4.1.0 (including) |
| Capnproto | Capnproto | 0.5.0.0 (including) | 0.5.0.0 (including) |
| Capnproto | Capnproto | 0.5.1.0 (including) | 0.5.1.0 (including) |
| Capnproto | Ubuntu | trusty | * |
| Capnproto | Ubuntu | upstream | * |
| Capnproto | Ubuntu | vivid/stable-phone-overlay | * |
| Capnproto | Ubuntu | wily | * |