Logo
componentcapnproto
Name
capnproto
Version
1.4.0
Type
library
Description
Cap'n Proto serialization/RPC system
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:capnproto:capnproto:1.4.0:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
0.9.2
scarthgap
1.0.2

Patches#


#
Title
Author
Resolve
1
Export binaries only for native build
Gyorgy Sarvari <skandigraun@gmail.com>

Vulnerabilities#


Name
Analysis
Description
Not Affected
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a value of 2^64 or larger, it would be truncated to a 64-bit integer. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.
Not Affected
Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, a negative Content-Length value was converted to unsigned, treating it as an impossibly large length instead. In theory, this bug could enable HTTP request/response smuggling. This vulnerability is fixed in 1.4.0.