tocsin

CVE-2022-46149

2 advisories.

crates.io/capnp CVE-2022-46149: medium 5.4

Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list

Action: Upgrade capnp to 0.13.7 or later.

cargo update -p capnp --precise 0.15.2
cargo update -p capnp --precise 0.14.11
cargo update -p capnp --precise 0.13.7

Affected

introducedfixedlast affected
0.15.00.15.2-
0.14.00.14.11-
00.13.7-

Fixed versions

0.15.20.14.110.13.7

Sources

CVE-2022-46149 · published · modified · JSON

crates.io/capnp CVE-2022-46149: unknown

out-of-bounds read possible when setting list-of-pointers

Action: Upgrade capnp to 0.13.7 or later.

cargo update -p capnp --precise 0.13.7
cargo update -p capnp --precise 0.14.11
cargo update -p capnp --precise 0.15.2

Affected

introducedfixedlast affected
0.0.0-00.13.7-
0.14.0-00.14.11-
0.15.0-00.15.2-

Fixed versions

0.13.70.14.110.15.2

Sources

CVE-2022-46149 · published · modified · JSON