CVE-2017-15300

The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET /…

published October 15, 2017

CVSS
—
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP/1.1"), which allows for a Denial of Service attack preventing a user from viewing their mining statistics by an attacker opening a session with telnet or netcat and connecting to the miner on the HTTP API port.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01070 · 64.6th percentile
Published
2017-10-15T08:00Z
EPSS history
Timeline
  • 15 OCT 08:00Z
    The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET /…
    cvelistv5