Vulnerabilities

TI-2014-03692 CVE-2014-4503 · GHSA-gmmc-5j4r-j729

The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through…

LOW 22

The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit) via a crafted (1) bbversion, (2) prev_hash, (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01219 Published 2014-07-23 No fix listed CWE-20

TI-2014-03691 CVE-2014-4502 · GHSA-9pc6-6rgp-4p27

Multiple heap-based buffer overflows in the parse_notify function in sgminer before…

MEDIUM 49

Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negat…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03296 Published 2014-07-23 No fix listed CWE-119

TI-2014-03690 CVE-2014-4501 · GHSA-wm22-f5pr-qxv3

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and…

MEDIUM 48

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0291 Published 2014-07-23 No fix listed CWE-119

Vulnerabilities

Filters

The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through…

Multiple heap-based buffer overflows in the parse_notify function in sgminer before…

Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and…