CVE-2018-10058 The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-onl...
HighCVSS 8.8
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/cgminer(Ubuntu:22.04) | All versions | No fix listed |
| cgminer project cgminer | = 4.10.0 | No fix listed |
| bfgminer | = 5.5.0 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- [oss-security] 20180603 CVE-2018-10058 and CVE-2018-10057 - cgminer <=4.10.0 and bfgminer <=5.5.0 remote management api post-auth buffer overflow and path traversal mailing-list third-party-advisory
- github.com exploit third-party-advisory