CVE-2014-4501

Published: Jul 23, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

Affected (22)

Products: Sgminer Project: Sgminer · Cgminer Project: Cgminer · Bfgminer: Bfgminer

1 product

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sgminer Project Sgminer	version ≤ 4.2.1
Sgminer Project Sgminer	Version 4.0.0
Sgminer Project Sgminer	Version 4.1.0
Sgminer Project Sgminer	Version 4.1.153
Sgminer Project Sgminer	Version 4.1.242
Sgminer Project Sgminer	Version 4.1.271
Sgminer Project Sgminer	Version 4.2.0

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Cgminer Project Cgminer	version ≤ 4.3.4
Cgminer Project Cgminer	Version 4.3.0
Cgminer Project Cgminer	Version 4.3.1
Cgminer Project Cgminer	Version 4.3.2
Cgminer Project Cgminer	Version 4.3.3

Configuration C

10 vulnerable

Vulnerable Software	Affected Versions
Bfgminer Bfgminer	version ≤ 3.2.9
Bfgminer Bfgminer	Version 3.2.0
Bfgminer Bfgminer	Version 3.2.1
Bfgminer Bfgminer	Version 3.2.2
Bfgminer Bfgminer	Version 3.2.3
Bfgminer Bfgminer	Version 3.2.4
Bfgminer Bfgminer	Version 3.2.5
Bfgminer Bfgminer	Version 3.2.6
Bfgminer Bfgminer	Version 3.2.7
Bfgminer Bfgminer	Version 3.2.8