{"id":"CVE-2018-10058","details":"The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers.","modified":"2026-07-08T14:59:16.385269Z","published":"2018-06-05T21:29:00.900Z","references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2018/06/03/1"},{"type":"EVIDENCE","url":"https://github.com/tintinweb/pub/tree/master/pocs/cve-2018-10058"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ckolivas/cgminer","events":[{"introduced":"bf5d9d6439c25ab7ee9526663b6ec4bbf8916123"},{"last_affected":"bf5d9d6439c25ab7ee9526663b6ec4bbf8916123"}],"database_specific":{"cpe":"cpe:2.3:a:cgminer_project:cgminer:4.10.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"4.10.0"},{"last_affected":"4.10.0"}],"source":"CPE_STRING"}}],"versions":["4.10.0","v4.10.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10058.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/luke-jr/bfgminer","events":[{"introduced":"adfcccdab3d196df7d79df6604f1965ee6e0afb4"},{"last_affected":"adfcccdab3d196df7d79df6604f1965ee6e0afb4"}],"database_specific":{"cpe":"cpe:2.3:a:bfgminer:bfgminer:5.5.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.5.0"},{"last_affected":"5.5.0"}],"source":"CPE_STRING"}}],"versions":["5.5.0","bfgminer-5.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10058.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}