| Package | Affected versions | Patched versions |
|---|---|---|
| bfgminer | = 3.2.0= 3.2.1= 3.2.2= 3.2.3= 3.2.4= 3.2.5= 3.2.6= 3.2.7= 3.2.8≤ 3.2.9≤ 4.0.0 | |
| sgminer | = 4.0.0= 4.1.0= 4.1.153= 4.1.242= 4.1.271= 4.2.0≤ 4.2.1 |
Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free