EUVD-2014-4428

Malware in sbrugna...

EUVD-2014-4429

Malware in sbrugna...

EUVD-2014-4430

Malware in sbrugna...

CVE-2014-4503

The parsenotify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service application exit via a crafted 1 bbversion, 2 prevhash, 3 nbit, or 4 ntime parameter in a mining.notify action stratum message...

CVE-2014-4501

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the 1 extractsockaddr or 2 parsereconnect functions in util.c...

CVE-2014-4502

Multiple heap-based buffer overflows in the parsenotify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a 1 large or 2 negative value in the Extranonc2size parameter in a mining.subscribe response and a...

Design/Logic Flaw

The parsenotify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service application exit via a crafted 1 bbversion, 2 prevhash, 3 nbit, or 4 ntime parameter in a mining.notify action stratum message...

CVE-2014-4501

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the 1 extractsockaddr or 2 parsereconnect functions in util.c...

CVE-2014-4503

The CVE-2014-4503 issue affects the mining software sgminer (before 4.2.2) and cgminer (3.3.0 through 4.0.1). The vulnerability resides in parse_notify within util.c, enabling man-in-the-middle attackers to trigger a denial of service (application exit) via crafted parameters (bbversion, prev_has...

CVE-2014-4502

Multiple heap-based buffer overflows in the parsenotify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a 1 large or 2 negative value in the Extranonc2size parameter in a mining.subscribe response and a...

CVE-2014-4502

CVE-2014-4502 involves multiple heap-based buffer overflows in the parse_notify function affecting sgminer < 4.2.2, cgminer < 4.3.5, and BFGMiner

CVE-2014-4503

The parsenotify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service application exit via a crafted 1 bbversion, 2 prevhash, 3 nbit, or 4 ntime parameter in a mining.notify action stratum message...

CVE-2014-4503

The parsenotify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service application exit via a crafted 1 bbversion, 2 prevhash, 3 nbit, or 4 ntime parameter in a mining.notify action stratum message...

CVE-2014-4501

The CVE affects multiple mining tools: sgminer , cgminer , and BFGMiner . A vulnerability in the long URL handling within the Stratum client.reconnect path allows multiple stack-based buffer overflows via the (1) extract_sockaddr or (2) parse_reconnect functions in util.c, enabling a remotely sen...

CVE-2014-4503

Removed by vendor...

CVE-2014-4501: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the 1 extractsockaddr or 2 parsereconnect functions in util.c...

CVE-2014-4503: Improper Input Validation

The parsenotify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service application exit via a crafted 1 bbversion, 2 prevhash, 3 nbit, or 4 ntime parameter in a mining.notify action stratum message...

PT-2014-5935

Name of the Vulnerable Software and Affected Versions sgminer versions prior to 4.2.2 cgminer versions prior to 4.3.5 BFGMiner versions prior to 4.1.0 Description The issue is related to multiple heap-based buffer overflows in the parse notify function. This can be triggered by remote pool server...

CVE-2014-4502: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in the parsenotify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a 1 large or 2 negative value in the Extranonc2size parameter in a mining.subscribe response and a...

PT-2014-5934

Name of the Vulnerable Software and Affected Versions sgminer versions prior to 4.2.2 cgminer versions prior to 4.3.5 BFGMiner versions prior to 3.3.0 Description The issue is related to multiple stack-based buffer overflows. These can be triggered by remote pool servers sending a long URL in a...