CVEvulnerability

CVE-2014-4501

10.0 HIGH Published 2014-07-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

Affected configurations

• sgminer project sgminer (<= 4.2.1) • sgminer project sgminer 4.0.0 • sgminer project sgminer 4.1.0 • sgminer project sgminer 4.1.153 • sgminer project sgminer 4.1.242 • sgminer project sgminer 4.1.271 • sgminer project sgminer 4.2.0 • cgminer project cgminer (<= 4.3.4) • cgminer project cgminer 4.3.0 • cgminer project cgminer 4.3.1 • cgminer project cgminer 4.3.2 • cgminer project cgminer 4.3.3 • bfgminer bfgminer (<= 3.2.9) • bfgminer bfgminer 3.2.0 • bfgminer bfgminer 3.2.1 • bfgminer bfgminer 3.2.2 • bfgminer bfgminer 3.2.3 • bfgminer bfgminer 3.2.4 • bfgminer bfgminer 3.2.5 • bfgminer bfgminer 3.2.6 • bfgminer bfgminer 3.2.7 • bfgminer bfgminer 3.2.8

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References