Lucene search

[email protected]CVE-2014-4501

HistoryJul 23, 2014 - 2:55 p.m.

CVE-2014-4501

2014-07-2314:55:06

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-4501

buffer overflow

sgminer

cgminer

bfgminer

remote code execution

security vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.7%

JSON

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

Affected configurations

NVD

Node

sgminer_projectsgminerRange≤4.2.1

sgminer_projectsgminerMatch4.0.0

sgminer_projectsgminerMatch4.1.0

sgminer_projectsgminerMatch4.1.153

sgminer_projectsgminerMatch4.1.242

sgminer_projectsgminerMatch4.1.271

sgminer_projectsgminerMatch4.2.0

Node

cgminer_projectcgminerRange≤4.3.4

cgminer_projectcgminerMatch4.3.0

cgminer_projectcgminerMatch4.3.1

cgminer_projectcgminerMatch4.3.2

cgminer_projectcgminerMatch4.3.3

Node

bfgminerbfgminerRange≤3.2.9

bfgminerbfgminerMatch3.2.0

bfgminerbfgminerMatch3.2.1

bfgminerbfgminerMatch3.2.2

bfgminerbfgminerMatch3.2.3

bfgminerbfgminerMatch3.2.4

bfgminerbfgminerMatch3.2.5

bfgminerbfgminerMatch3.2.6

bfgminerbfgminerMatch3.2.7

bfgminerbfgminerMatch3.2.8

CPENameOperatorVersion
sgminer_project:sgminersgminer project sgminerle4.2.1
sgminer_project:sgminersgminer project sgminereq4.0.0
sgminer_project:sgminersgminer project sgminereq4.1.0
sgminer_project:sgminersgminer project sgminereq4.1.153
sgminer_project:sgminersgminer project sgminereq4.1.242
sgminer_project:sgminersgminer project sgminereq4.1.271
sgminer_project:sgminersgminer project sgminereq4.2.0

CPE	Name	Operator	Version
sgminer_project:sgminer	sgminer project sgminer	le	4.2.1
sgminer_project:sgminer	sgminer project sgminer	eq	4.0.0
sgminer_project:sgminer	sgminer project sgminer	eq	4.1.0
sgminer_project:sgminer	sgminer project sgminer	eq	4.1.153
sgminer_project:sgminer	sgminer project sgminer	eq	4.1.242
sgminer_project:sgminer	sgminer project sgminer	eq	4.1.271
sgminer_project:sgminer	sgminer project sgminer	eq	4.2.0