Name
capnproto
Version
1.4.0
Type
library
Description
Cap'n Proto serialization/RPC system
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:capnproto:capnproto:1.4.0:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
Export binaries only for native build
Gyorgy Sarvari <skandigraun@gmail.com>
Vulnerabilities#
Name
Analysis
Description
Not Affected
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.
Not Affected
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.