Critical severity · published Oct 21, 2022
CVE-2022-37454
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…
9.8
CVSS
7.4%
EPSS
No
On KEV
Description
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PHP · PHP
7.2.0 before 7.4.33; 8.0.0 before 8.0.25; 8.1.0 before 8.1.12 · source: NVD
DL
Debian Linux · Debian
10.0; 11.0 · source: NVD
EK
Extended Keccak Code Package · Extended Keccak Code Package Project
All versions, or not specified · source: NVD
FE
Fedora · Fedoraproject
35; 36 · source: NVD
PY
Pypy · Pypy
7.0.0 and later · source: NVD
PY
Pysha3 · Pysha3 Project
All versions, or not specified · source: NVD
PY
Python · Python
3.6.0 before 3.7.16; 3.8.0 before 3.8.16; 3.9.0 before 3.9.16; 3.10.0 before 3.10.9 · source: NVD
SH
Sha3 · Sha3 Project
before 1.0.5 · source: NVD
RA
RUGGEDCOM APE1808 · Siemens
0 · source: CISA
SS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA
SS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA
SS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.0 before V3.1.5 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-37454
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-37454
Third Party Advisory
https://csrc.nist.gov/projects/hash-functions/sha-3-project
eprint.iacr.org
https://eprint.iacr.org/2023/331
Patch
https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658
Mailing List
https://lists.debian.org/debian-lts-announce/2022/10/msg00041.html
Mailing List
https://lists.debian.org/debian-lts-announce/2022/11/msg00000.html
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/
More from PHP
9.8
CVE-2026-109618
RCE via OOM corruption
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability