CVE-2022-37454 : The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer ove

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Published 2022-10-21 06:15:09

Updated 2025-05-08 15:15:47

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2022-37454

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Matching versions
PHP » PHP
Versions from including (>=) 8.1.0 and before (<) 8.1.12
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Matching versions
PHP » PHP
Versions from including (>=) 7.2.0 and before (<) 7.4.33
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Matching versions
PHP » PHP
Versions from including (>=) 8.0.0 and before (<) 8.0.25
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 36
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.6.0 and before (<) 3.7.16
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.8.0 and before (<) 3.8.16
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.10.0 and before (<) 3.10.9
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Python » Python
Versions from including (>=) 3.9.0 and before (<) 3.9.16
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Matching versions
Extended Keccak Code Package Project » Extended Keccak Code Package » Version: N/A
cpe:2.3:a:extended_keccak_code_package_project:extended_keccak_code_package:-:*:*:*:*:*:*:*
Matching versions
Sha3 Project » Sha3 » For Ruby
Versions before (<) 1.0.5
cpe:2.3:a:sha3_project:sha3:*:*:*:*:*:ruby:*:*
Matching versions
Pysha3 Project » Pysha3
cpe:2.3:a:pysha3_project:pysha3:*:*:*:*:*:*:*:*
Matching versions
Pypy » Pypy
Versions from including (>=) 7.0.0
cpe:2.3:a:pypy:pypy:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2022-37454

Top countries where our scanners detected CVE-2022-37454

Top open port discovered on systems with this issue 80

IPs affected by CVE-2022-37454 1,047,579

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2022-37454!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2022-37454

EPSS FAQ

1.33%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-37454

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-05-08
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-37454

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2022-37454

https://csrc.nist.gov/projects/hash-functions/sha-3-project

Hash Functions | CSRC
Third Party Advisory;US Government Resource
https://news.ycombinator.com/item?id=33281106

SHA-3 Buffer Overflow | Hacker News
Issue Tracking;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00000.html

[SECURITY] [DLA 3175-1] python3.7 security update
Mailing List;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/10/msg00041.html

[SECURITY] [DLA 3174-1] pysha3 security update
Mailing List;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/

[SECURITY] Fedora 35 Update: php-8.0.25-1.fc35 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://news.ycombinator.com/item?id=35050307

A Vulnerability in Implementations of SHA-3, Shake, EdDSA | Hacker News
https://security.gentoo.org/glsa/202305-02

Python, PyPy3: Multiple Vulnerabilities (GLSA 202305-02) — Gentoo security

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/

[SECURITY] Fedora 36 Update: php-8.1.12-1.fc36 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://security.netapp.com/advisory/ntap-20230203-0001/
https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658

Buffer overflow in sponge queue functions · Advisory · XKCP/XKCP · GitHub
Patch;Third Party Advisory
https://eprint.iacr.org/2023/331

A Vulnerability in Implementations of SHA-3, SHAKE, EdDSA, and Other NIST-Approved Algorithm
https://www.debian.org/security/2022/dsa-5267

Debian -- Security Information -- DSA-5267-1 pysha3
Third Party Advisory
https://www.debian.org/security/2022/dsa-5269

Debian -- Security Information -- DSA-5269-1 pypy3
Third Party Advisory
https://mouha.be/sha-3-buffer-overflow/

SHA-3 Buffer Overflow – Nicky Mouha
Exploit;Third Party Advisory