CVE-2014-4501
HighSummary
Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message.
Risk Assessment
The organization may be exposed to remote attacks that could lead to unauthorized access or system destabilization.
Recommendation
It is recommended to update to the latest versions of the software to mitigate these vulnerabilities.
Other vulnerabilities in sgminer, cgminer, BFGMiner
Original NVD description (English source)
Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.

