Lucene search

[email protected]NVD:CVE-2014-4501

HistoryJul 23, 2014 - 2:55 p.m.

CVE-2014-4501

2014-07-2314:55:06

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.006

Percentile

79.3%

JSON

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

Affected configurations

Nvd

Node

sgminer_projectsgminerRange≤4.2.1

sgminer_projectsgminerMatch4.0.0

sgminer_projectsgminerMatch4.1.0

sgminer_projectsgminerMatch4.1.153

sgminer_projectsgminerMatch4.1.242

sgminer_projectsgminerMatch4.1.271

sgminer_projectsgminerMatch4.2.0

Node

cgminer_projectcgminerRange≤4.3.4

cgminer_projectcgminerMatch4.3.0

cgminer_projectcgminerMatch4.3.1

cgminer_projectcgminerMatch4.3.2

cgminer_projectcgminerMatch4.3.3

Node

bfgminerbfgminerRange≤3.2.9

bfgminerbfgminerMatch3.2.0

bfgminerbfgminerMatch3.2.1

bfgminerbfgminerMatch3.2.2

bfgminerbfgminerMatch3.2.3

bfgminerbfgminerMatch3.2.4

bfgminerbfgminerMatch3.2.5

bfgminerbfgminerMatch3.2.6

bfgminerbfgminerMatch3.2.7

bfgminerbfgminerMatch3.2.8

VendorProductVersionCPE
sgminer_projectsgminer*cpe:2.3:a:sgminer_project:sgminer:*:*:*:*:*:*:*:*
sgminer_projectsgminer4.0.0cpe:2.3:a:sgminer_project:sgminer:4.0.0:*:*:*:*:*:*:*
sgminer_projectsgminer4.1.0cpe:2.3:a:sgminer_project:sgminer:4.1.0:*:*:*:*:*:*:*
sgminer_projectsgminer4.1.153cpe:2.3:a:sgminer_project:sgminer:4.1.153:*:*:*:*:*:*:*
sgminer_projectsgminer4.1.242cpe:2.3:a:sgminer_project:sgminer:4.1.242:*:*:*:*:*:*:*
sgminer_projectsgminer4.1.271cpe:2.3:a:sgminer_project:sgminer:4.1.271:*:*:*:*:*:*:*
sgminer_projectsgminer4.2.0cpe:2.3:a:sgminer_project:sgminer:4.2.0:*:*:*:*:*:*:*
cgminer_projectcgminer*cpe:2.3:a:cgminer_project:cgminer:*:*:*:*:*:*:*:*
cgminer_projectcgminer4.3.0cpe:2.3:a:cgminer_project:cgminer:4.3.0:*:*:*:*:*:*:*
cgminer_projectcgminer4.3.1cpe:2.3:a:cgminer_project:cgminer:4.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sgminer_project	sgminer	*	cpe:2.3:a:sgminer_project:sgminer::::::::
sgminer_project	sgminer	4.0.0	cpe:2.3:a:sgminer_project:sgminer:4.0.0:::::::*
sgminer_project	sgminer	4.1.0	cpe:2.3:a:sgminer_project:sgminer:4.1.0:::::::*
sgminer_project	sgminer	4.1.153	cpe:2.3:a:sgminer_project:sgminer:4.1.153:::::::*
sgminer_project	sgminer	4.1.242	cpe:2.3:a:sgminer_project:sgminer:4.1.242:::::::*
sgminer_project	sgminer	4.1.271	cpe:2.3:a:sgminer_project:sgminer:4.1.271:::::::*
sgminer_project	sgminer	4.2.0	cpe:2.3:a:sgminer_project:sgminer:4.2.0:::::::*
cgminer_project	cgminer	*	cpe:2.3:a:cgminer_project:cgminer::::::::
cgminer_project	cgminer	4.3.0	cpe:2.3:a:cgminer_project:cgminer:4.3.0:::::::*
cgminer_project	cgminer	4.3.1	cpe:2.3:a:cgminer_project:cgminer:4.3.1:::::::*