Stack overflow

2017-12-0509:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.1 Low

EPSS

Percentile

94.9%

JSON

The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.

CPENameOperatorVersion
claymore_dual_minereq10.1

CPE	Name	Operator	Version
	claymore_dual_miner	eq	10.1

References

www.openwall.com/lists/oss-security/2017/12/04/3

github.com/tintinweb/pub/tree/master/pocs/cve-2017-16930

www.exploit-db.com/exploits/43231/