Description

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Remediation

References

CVE-2022-37454

Related Vulnerabilities

WordPress Plugin Hustle-Pop-Ups, Slide-ins and Email Opt-ins Cross-Site Scripting (4.7.0.5)

WordPress Plugin WP Reroute Email Cross-Site Scripting (1.4.9)

WordPress Plugin Swim Team Arbitrary File Download (1.44.1077)

Ruby on Rails Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2006-4111)

Jenkins Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-47803)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-190 CVE-2022-37454