medium4.3
CVE-2014-4503
The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (ap…
Impact
The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit) via a crafted (1) bbversion, (2) prev_hash, (3) nbit, or (4) ntime parameter in a mining.notify action stratum message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sgminer Project | Sgminer | through 4.2.1 Versions 4.0.0, 4.1.0, 4.1.153, 4.1.242, 4.1.271 |
| Cgminer Project | Cgminer | Versions 3.3.0, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.4.0 |