Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-4502

Опубликовано: 23 июл. 2014
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:bfgminer:bfgminer:*:*:*:*:*:*:*:*
Версия до 4.0.0 (включая)
Конфигурация 2

Одно из

cpe:2.3:a:sgminer_project:sgminer:*:*:*:*:*:*:*:*
Версия до 4.2.1 (включая)
cpe:2.3:a:sgminer_project:sgminer:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.153:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.242:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.1.271:*:*:*:*:*:*:*
cpe:2.3:a:sgminer_project:sgminer:4.2.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:bfgminer:bfgminer:*:*:*:*:*:*:*:*
Версия до 3.2.9 (включая)
cpe:2.3:a:bfgminer:bfgminer:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:bfgminer:bfgminer:3.2.8:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.00517
Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 11 лет назад

Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.

debian
больше 11 лет назад

Multiple heap-based buffer overflows in the parse_notify function in s ...

github
больше 3 лет назад

Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.

EPSS

Процентиль: 66%
0.00517
Низкий

10 Critical

CVSS2

Дефекты

CWE-119