PT-2014-7117
CVE-2014-6251
·
Publicado
2014-10-25
·
Atualizado
2014-10-27
Descrição por
CVSS 2.0
6.0
MédiaMétricasAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
CPUMiner versions prior to 2.4.1
Description
A stack-based buffer overflow issue exists, allowing remote attackers to have an unspecified impact. This is achieved by sending a mining.subscribe response with a large
nonce2 length, followed by triggering the overflow with a mining.notify request.Recommendations
For versions prior to 2.4.1, update to version 2.4.1 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾