Kritik CVSS 9.8 PoC var

CVE-2022-37454: Extended Keccak Code Package: tamsayı taşması

Yayın: 21 Ekim 2022 09:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Özet bilgiler

Ürün: Extended Keccak Code Package Project Extended Keccak Code Package
CVSS v3.1: 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: %7,41 (yüzdelik 94)
CWE: CWE-190
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
extended-keccak-code-package-project-extended-keccak-code-package	—	—	—
debian-debian-linux	10.0	10.0	—
debian-debian-linux	11.0	11.0	—
fedoraproject-fedora	35	35	—
fedoraproject-fedora	36	36	—
php-php	7.2.0	—	7.4.33
php-php	8.0.0	—	8.0.25
php-php	8.1.0	—	8.1.12
python-python	3.6.0	—	3.7.16
python-python	3.8.0	—	3.8.16
python-python	3.9.0	—	3.9.16
python-python	3.10.0	—	3.10.9
sha3-project-sha3	—	—	1.0.5
pysha3-project-pysha3	—	—	—
pypy-pypy	7.0.0	—	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları