VYPR
← All advisories
High severity8.8OSV Advisory· Published Jun 5, 2018· Updated Jun 17, 2026

CVE-2018-10058

CVE-2018-10058

Description

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Ckolivas/CgminerOSV2 versions
    bfgminer-2.10.0, bfgminer-2.10.1, bfgminer-2.10.2, …+ 1 more
    • (no CPE)range: bfgminer-2.10.0, bfgminer-2.10.1, bfgminer-2.10.2, …
    • cpe:2.3:a:cgminer_project:cgminer:4.10.0:*:*:*:*:*:*:*
  • Bfgminer/Bfgminer2 versions
    cpe:2.3:a:bfgminer:bfgminer:5.5.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bfgminer:bfgminer:5.5.0:*:*:*:*:*:*:*
    • (no CPE)range: =5.5.0
  • Cgminer/cgminerllm-fuzzy
    Range: =4.10.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.