PT-2014-7117
CVE-2014-6251
·
تاريخ النشر
2014-10-25
·
تاريخ التحديث
2014-10-27
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
CPUMiner versions prior to 2.4.1
Description
A stack-based buffer overflow issue exists, allowing remote attackers to have an unspecified impact. This is achieved by sending a mining.subscribe response with a large
nonce2 length, followed by triggering the overflow with a mining.notify request.Recommendations
For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾