NVD

Id
32486  
Name
CVE-2014-4503  
Description
The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit) via a crafted (1) bbversion, (2) prev_hash, (3) nbit, or (4) ntime parameter in a mining.notify action stratum message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-07-23  
Modified Date
2014-07-23  
Seq
2014-4503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171410 32486 CVE-2014-4503 20140722 CVE-2014-4503 : Invalid Parameters in mining.notify Stratum Message Leads to Denial of Service  View
171411 32486 CVE-2014-4503 https://github.com/sgminer-dev/sgminer/commit/910c36089940e81fb85c65b8e63dcd2fac71470c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14675 JVNDB-2014-003550 sgminer および cgminer の util.c の parse_notify 関数におけるサービス運用妨害 (DoS) の脆弱性 sgminer および cgminer の util.c の parse_notify 関数には、サービス運用妨害 (アプリケーションの終了) 状態にされる脆弱性が存在します。 CVE-2014-4503 71791 CVE-2014-4503 32486 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003550.html 2014-06-06 2014-07-24 View