CVE-2014-4503 : Invalid Parameters in mining.notify Stratum Message Leads to Denial of Service

[Mick Ayzenberg <mick () dejavusecurity com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vulnerability title: Invalid Parameters in mining.notify Stratum
Message Leads to Denial of Service
CVE: CVE-2014-4503
Affected version: SGMiner before 4.2.2, CGMiner 3.3.0 - 4.0.1
Reported by: Mick Ayzenberg of Deja vu Security

Details:

The "parse_notify" function contains a number of checks to validate
that data received from a pool is of an expected format.  When
parameters are passed that do not pass these checks the function
"quit" and "quithere" are called and the application exits.  An
attacker can utilize this behavior by intentionally sending malformed
data, forcing the application to exit.

An attacker who is in the middle of a valid stratum connection can
trivially perform this attack by providing an invalid hex string for
one of these 4 parameters: bbversion, prev_hash, nbit, ntime.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTzWlZAAoJEE4ssKiaXz4tvUcH/3V69a2WEDoMlJFBMK1b/igu
I+hc67ApkpfQWXv6LSNU1Tf7aJ1W55wCwtPZAKeGsngvD4Cq+55knHVbKMyNOGGM
xgLNRjZdJOZioNIh1zOtFQaIShLMipmK03vvkyKXT7lgNZG0YPr7w5UYkB8ybK6g
Xc0xVJfqWecluq9Uq+APPdhRO7MoXATY1Y2S/kn6rS6FDW1n1g0aQ549/7OG9Koo
00suIGOsMsqHrd6WcWgInbcHyaAfBkLKIRcKgjuflZr+AhYIqENogP1jofEwMJU4
0wmlNSbP+bV+Nb6N2Yxn8zQBPTk+HltUQMRjNgJWD6zagCOqWEaB+ArqGn1sAP8=
=Mhw9
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/