| Package | Affected versions | Patched versions |
|---|---|---|
| bfgminer | = 3.2.0= 3.2.1= 3.2.2= 3.2.3= 3.2.4= 3.2.5= 3.2.6= 3.2.7= 3.2.8≤ 3.2.9 | |
| cgminer | = 4.3.0= 4.3.1= 4.3.2= 4.3.3≤ 4.3.4 | |
| sgminer | = 4.0.0= 4.1.0= 4.1.153= 4.1.242= 4.1.271= 4.2.0≤ 4.2.1 |
Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free