Approved changes feed: RSS · Atom

cpe:2.3:a:sgminer_project:sgminer:4.1.153:*:*:*:*:*:*:*

part: a version: 4.1.153 update: *

VendorSgminer Project (6e2cd69b-efc4-506c-a52e-6af5cd09c271)
ProductSgminer (e63cd70a-ff32-57f2-abe9-b73db4c5fafd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/gcamerli/sgminer purl2cpe 2026-06-01 10:12:59.943251
pkg:github/genesismining/sgminer-gm purl2cpe 2026-06-01 10:12:59.943252
pkg:github/sgminer-dev/sgminer purl2cpe 2026-06-01 10:12:59.943254

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4503 vulnerable 2026-06-08 05:05:44.955097 Details available
The parse_notify function in util.c in sgminer before 4.2.2 and cgminer 3.3.0 through 4.0.1 allows man-in-the-middle attackers to cause a denial of service (application exit) via a crafted (1) bbversion, (2) prev_hash, (3) nbit, or (4) ntime parameter in a mining.notify action stratum message.
Published: 2014-07-23T14:00:00.000Z
Updated: 2024-08-06T11:20:25.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4502 vulnerable 2026-06-08 05:05:44.954354 Details available
Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.
Published: 2014-07-23T14:00:00.000Z
Updated: 2024-08-06T11:20:26.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4501 vulnerable 2026-06-08 05:05:44.944079 Details available
Multiple stack-based buffer overflows in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 3.3.0 allow remote pool servers to have unspecified impact via a long URL in a client.reconnect stratum message to the (1) extract_sockaddr or (2) parse_reconnect functions in util.c.
Published: 2014-07-23T14:00:00.000Z
Updated: 2024-08-06T11:20:26.035Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.