What is CVE-2014-4503?

CVE-2014-4503 is a vulnerability in Cgminer Project, classified under Improper Input Validation. Published 2014-07-23.

Is CVE-2014-4503 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Cgminer Project

CVE-2014-4503

The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit) via a crafted (1) bbversion, (2) prev_hash, (3) nbit, or (4) ntime parameter in a mining.notify action stratum message.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.012 (65.6th percentile) — read the EPSS interpretation.

Affected products

Cgminer_project Cgminer — versions 3.3.0, 3.3.1, 3.3.2
Sgminer_project Sgminer — versions 4.0.0, 4.1.0, 4.1.153
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

andir/nixos-issue-db-example

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)

Frequently asked questions

What is CVE-2014-4503?: CVE-2014-4503 is a vulnerability in Cgminer Project, classified under Improper Input Validation. Published 2014-07-23.
Is CVE-2014-4503 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.