CVE-2014-4501

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

2.91% chance of exploitation in the next 30 days, 87th percentile

Published

2014-07-23

Updated

2024-08-06

Proof-of-concept exploits (1)

• ckolivas/cgminer/commit/e1c5050734123973b99d181c45e74b2cbb00272e3672★ · 2020-05-27

Security advisories

• luke-jr/bfgminer/commit/c80ad8548251eb0e15329fc240c89070640c9d79
• sgminer-dev/sgminer/commit/78cc408369bdbbd440196c93574098d1482efbce

References

• CVE Record
• NVD entry

Related

• CVE-2014-4502
• CVE-2018-10685
• CVE-2018-11496
• CVE-2018-5650
• CVE-2018-5747
• CVE-2018-5786