{"id":"CVE-2014-4501","aliases":["EUVD-2014-4428","GHSA-wm22-f5pr-qxv3"],"status":"published","title":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner...","description":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0291,"percentile":0.87078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2014-07-23T14:00:00Z","modified":"2026-06-17T00:10:08Z","products":[{"vendor":"bfgminer","product":"bfgminer"},{"vendor":"cgminer_project","product":"cgminer"},{"vendor":"sgminer_project","product":"sgminer"}],"references":[{"url":"http://seclists.org/fulldisclosure/2014/Jul/118","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://github.com/luke-jr/bfgminer/commit/c80ad8548251eb0e15329fc240c89070640c9d79","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://github.com/sgminer-dev/sgminer/commit/78cc408369bdbbd440196c93574098d1482efbce","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch"]},{"url":"https://github.com/ckolivas/cgminer/commit/e1c5050734123973b99d181c45e74b2cbb00272e","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch"]},{"url":"https://github.com/sgminer-dev/sgminer/commit/b65574bef233474e915fdf18614aa211e31cc6c2","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4501"},{"url":"https://github.com/advisories/GHSA-wm22-f5pr-qxv3"}],"sources":{"cve":[{"id":"CVE-2014-4501","description":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.","status":"published","published":"2014-07-23T14:00:00Z","modified":"2024-08-06T11:20:26.035Z","updated_at":"2026-11-02T14:33:45.938615Z"}],"euvd":[{"id":"EUVD-2014-4428","description":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.","status":"published","published":"2014-07-23T14:00:00Z","modified":"2024-08-06T11:20:26Z","updated_at":"2026-11-03T01:57:06.158247Z"}],"ghsa":[{"id":"GHSA-wm22-f5pr-qxv3","title":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner...","description":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.","status":"published","published":"2022-05-17T04:39:23Z","modified":"2023-01-28T05:02:13Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:44.460546Z"}],"nvd":[{"id":"CVE-2014-4501","description":"Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.","status":"published","published":"2014-07-23T14:55:06.07Z","modified":"2026-06-17T00:10:08.3Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}