CVE-2014-4501

🗓️ 23 Jul 2014 14:00:00Reported by mitreType

Multiple stack-based buffer overflows in sgminer, cgminer, and BFGMiner before 4.2.2, 4.3.5, and 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2014-4501	23 Jul 201414:00	–	cvelist
Debian CVE	CVE-2014-4501	23 Jul 201414:00	–	debiancve
EUVD	EUVD-2014-4428	7 Oct 202500:30	–	euvd
NVD	CVE-2014-4501	23 Jul 201414:55	–	nvd
Prion	Stack overflow	23 Jul 201414:55	–	prion
UbuntuCve	CVE-2014-4501	23 Jul 201414:55	–	ubuntucve

NVD

Node

sgminer_project sgminerRange≤4.2.1

sgminer_project sgminerMatch4.0.0

sgminer_project sgminerMatch4.1.0

sgminer_project sgminerMatch4.1.153

sgminer_project sgminerMatch4.1.242

sgminer_project sgminerMatch4.1.271

sgminer_project sgminerMatch4.2.0

Node

cgminer_project cgminerRange≤4.3.4

cgminer_project cgminerMatch4.3.0

cgminer_project cgminerMatch4.3.1

cgminer_project cgminerMatch4.3.2

cgminer_project cgminerMatch4.3.3

Node

bfgminer bfgminerRange≤3.2.9

bfgminer bfgminerMatch3.2.0

bfgminer bfgminerMatch3.2.1

bfgminer bfgminerMatch3.2.2

bfgminer bfgminerMatch3.2.3

bfgminer bfgminerMatch3.2.4

bfgminer bfgminerMatch3.2.5

bfgminer bfgminerMatch3.2.6

bfgminer bfgminerMatch3.2.7

bfgminer bfgminerMatch3.2.8

Source	Link
github	www.github.com/sgminer-dev/sgminer/commit/78cc408369bdbbd440196c93574098d1482efbce
github	www.github.com/ckolivas/cgminer/commit/e1c5050734123973b99d181c45e74b2cbb00272e
github	www.github.com/luke-jr/bfgminer/commit/c80ad8548251eb0e15329fc240c89070640c9d79
seclists	www.seclists.org/fulldisclosure/2014/Jul/118
github	www.github.com/sgminer-dev/sgminer/commit/b65574bef233474e915fdf18614aa211e31cc6c2

06 May 2026 22:30Current

7.4High risk

Vulners AI Score7.4

CVSS 210

EPSS0.00221

CWE-119