Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-4501

Опубликовано: 23 июл. 2014
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sgminer_project:sgminer:*:*:*:*:*:*:*:*
Версия до 4.2.1 (включая)
cpe:2.3:a:sgminer_project:sgminer:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.153:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.242:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.271:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.2.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:cgminer_project:cgminer:*:*:*:*:*:*:*:*
Версия до 4.3.4 (включая)
cpe:2.3:a:cgminer_project:cgminer:4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cgminer_project:cgminer:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cgminer_project:cgminer:4.3.2:*:*:*:*:*:*:*
cpe:2.3:a:cgminer_project:cgminer:4.3.3:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:bfgminer:bfgminer:*:*:*:*:*:*:*:*
Версия до 3.2.9 (включая)
cpe:2.3:a:bfgminer:bfgminer:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.8:*:*:*:*:*:*:*

EPSS

Процентиль: 44%
0.0022
Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 11 лет назад

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

debian
больше 11 лет назад

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer ...

github
больше 3 лет назад

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

EPSS

Процентиль: 44%
0.0022
Низкий

10 Critical

CVSS2

Дефекты

CWE-119