EXPOSURES › CVE-2022-37454
CVE-2022-37454
CRITICAL
DETAIL
SourceNVD · cve
Published2022-10-21
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-37454 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
debian · vendorextended keccak code package project · vendorfedoraproject · vendorphp · vendorpypy · vendorpysha3 project · vendorpython · vendorsha3 project · vendordebian linux · productextended keccak code package · productfedora · productphp · productpypy · productpysha3 · productpython · productsha3 · product
DESCRIPTION
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.