CVE-2017-7892
capnproto: Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization
CVE-2017-7892 is fixed in 2 products on 1 platform, first by capnproto 0.6.1-1, released April 17, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0184
79th percentile
Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp application because Cap'n Proto relies on pointer arithmetic calculations that overflow. An example compiler with optimization that elides a bounds check in such calculations is Apple LLVM version 8.1.0 (clang-802.0.41). The attack vector is a crafted far pointer within a message.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| capnproto · Ubuntu 18.04.6 LTS (bionic) | 0.6.1-1 | capnproto 0.6.1-1 | Apr 17, 2017 |
| libcapnp-0.6.1 · Ubuntu 18.04.6 LTS (bionic) | 0.6.1-1 | libcapnp-0.6.1 0.6.1-1 | Apr 17, 2017 |