UpHeron
All vulnerabilities

Servers and applications

CVE-2022-37454

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Severity
Critical 9.8
Published
21 Oct 2022
Last changed
14 Oct 2026
Added to UpHeron
14 Oct 2026
Fixed in
3.8.16, 3.9.16, 3.10.9, 7.4.33, 8.0.25, 8.1.12
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • From 7.2.0 before 7.4.33
  • From 8.0.0 before 8.0.25
  • From 8.1.0 before 8.1.12
PythonServers and applications · cpe:a:python:python
  • From 3.6.0 before 3.7.16
  • From 3.8.0 before 3.8.16
  • From 3.9.0 before 3.9.16
  • From 3.10.0 before 3.10.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-37454
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-37454