← Back

CVE-2014-4502

nvd nist
Published: Jul 23, 2014Modified: May 6, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.

Affected (18)

Bfgminer
1 product
Bfgminer
Sgminer Project
1 product
Sgminer
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Bfgminer
Up to 4.0.0
Configuration B
7 vulnerable
Vulnerable SoftwareAffected Versions
Sgminer Project
Sgminer
Up to 4.2.1
Sgminer
Version 4.0.0
Sgminer
Version 4.1.0
Sgminer
Version 4.1.153
Sgminer
Version 4.1.242
Sgminer
Version 4.1.271
Sgminer
Version 4.2.0
Configuration C
10 vulnerable
Vulnerable SoftwareAffected Versions
Bfgminer
Bfgminer
Up to 3.2.9
Bfgminer
Version 3.2.0
Bfgminer
Version 3.2.1
Bfgminer
Version 3.2.2
Bfgminer
Version 3.2.3
Bfgminer
Version 3.2.4
Bfgminer
Version 3.2.5
Bfgminer
Version 3.2.6
Bfgminer
Version 3.2.7
Bfgminer
Version 3.2.8

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.