CVE:CVE-2022-46149
CNNVD:CNNVD-202211-3735
capnproto是capnproto开源的一个 Proto 序列化/RPC 系统-核心工具和C++库
capnproto存在缓冲区错误漏洞，该漏洞源于其处理list to list的操作存在逻辑错误导致越界读取。
solution:Upgrade capnproto capnproto to a higher version than 0.7.1,0.9.2,0.10.3,0.8.0,and avoid the version (,0.7.1),[0.9.0,0.9.2),[0.10.0,0.10.3),0.8.0; Upgrade capnproto capnp to a higher version than 0.13.7,0.14.11,0.15.2,and avoid the version (,0.13.7),[0.14.0,0.14.11),[0.15.0,0.15.2); Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37