Description

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Remediation

References

CVE-2022-37454

Related Vulnerabilities

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.0.17)

MySQL CVE-2019-2801 Vulnerability (CVE-2019-2801)

WordPress Plugin Simple Slideshow Manager Multiple Cross-Site Scripting Vulnerabilities (2.3)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12023)

WordPress Plugin TR Easy Google Analytics Cross-Site Scripting (1.0.0)

Severity

Critical

Classification

CVE-2022-37454 CWE-190 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities