full-disclosure - [FD] CVE-2014-4503 : Invalid Parameters in mining.notify Stratum Message Leads to Denial of Service

Open Source and information security mailing list archives

Date: Mon, 21 Jul 2014 12:26:17 -0700
From: Mick Ayzenberg <mick@...avusecurity.com>
To: fulldisclosure@...lists.org
Subject: [FD] CVE-2014-4503 : Invalid Parameters in mining.notify Stratum
 Message Leads to Denial of Service

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Vulnerability title: Invalid Parameters in mining.notify Stratum
Message Leads to Denial of Service
CVE: CVE-2014-4503
Affected version: SGMiner before 4.2.2, CGMiner 3.3.0 - 4.0.1
Reported by: Mick Ayzenberg of Deja vu Security

Details:

The "parse_notify" function contains a number of checks to validate
that data received from a pool is of an expected format.  When
parameters are passed that do not pass these checks the function
"quit" and "quithere" are called and the application exits.  An
attacker can utilize this behavior by intentionally sending malformed
data, forcing the application to exit.

An attacker who is in the middle of a valid stratum connection can
trivially perform this attack by providing an invalid hex string for
one of these 4 parameters: bbversion, prev_hash, nbit, ntime.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTzWlZAAoJEE4ssKiaXz4tvUcH/3V69a2WEDoMlJFBMK1b/igu
I+hc67ApkpfQWXv6LSNU1Tf7aJ1W55wCwtPZAKeGsngvD4Cq+55knHVbKMyNOGGM
xgLNRjZdJOZioNIh1zOtFQaIShLMipmK03vvkyKXT7lgNZG0YPr7w5UYkB8ybK6g
Xc0xVJfqWecluq9Uq+APPdhRO7MoXATY1Y2S/kn6rS6FDW1n1g0aQ549/7OG9Koo
00suIGOsMsqHrd6WcWgInbcHyaAfBkLKIRcKgjuflZr+AhYIqENogP1jofEwMJU4
0wmlNSbP+bV+Nb6N2Yxn8zQBPTk+HltUQMRjNgJWD6zagCOqWEaB+ArqGn1sAP8=
=Mhw9
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives