CVE-2022-37454Critical· 9.8▾ AbyssalPoC availableThe Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 53.9 · likelihood 1.5 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
5.4%
Last analysed / modified upstream
Exploit / PoC code exists
5.4% → 7.4%
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
extended_keccak_code_packagedebian_linux = 10.0debian_linux = 11.0fedora = 35fedora = 36php >= 7.2.0, < 7.4.33php >= 8.0.0, < 8.0.25php >= 8.1.0, < 8.1.12python >= 3.6.0, < 3.7.16python >= 3.8.0, < 3.8.16python >= 3.9.0, < 3.9.16python >= 3.10.0, < 3.10.9sha3 < 1.0.5pysha3pypy >= 7.0.0Upgrade past the affected range:
php 8.1.12python 3.10.9sha3 1.0.5Affected packages:
pysha3 <= 1.0.2sha3 < 1.0.5Patched in:
sha3 1.0.5Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-45853Critical· 9.8MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field
CVE-2022-25315Critical· 9.8In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
CVE-2022-25314High· 7.5In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.
CVE-2022-23990High· 7.5Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVE-2022-23852Critical· 9.8Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVE-2022-22822Critical· 9.8addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.