CVE-2014-4502
HighSummary
Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a large or negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.
Risk Assessment
This vulnerability may lead to remote code execution or system instability, posing a serious threat to the security of mining operations.
Recommendation
It is recommended to update to the latest versions of sgminer, cgminer, and BFGMiner to mitigate the risks associated with this vulnerability.
Other vulnerabilities in sgminer, cgminer, BFGMiner
Original NVD description (English source)
Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.