--- id: CVE-2022-37454 title: >- The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties summary: >- The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge… severity: critical cvss: 9.8 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H' cwe: - CWE-190 vendor: extended_keccak_code_package_project product: extended_keccak_code_package affected: - extended_keccak_code_package - debian_linux = 10.0 - debian_linux = 11.0 - fedora = 35 - fedora = 36 - 'php >= 7.2.0, < 7.4.33' - 'php >= 8.0.0, < 8.0.25' - 'php >= 8.1.0, < 8.1.12' - 'python >= 3.6.0, < 3.7.16' - 'python >= 3.8.0, < 3.8.16' - 'python >= 3.9.0, < 3.9.16' - 'python >= 3.10.0, < 3.10.9' - sha3 < 1.0.5 - pysha3 - pypy >= 7.0.0 patched: - php 8.1.12 - python 3.10.9 - sha3 1.0.5 published: '2022-10-21' updated: '2026-10-14' sourceUpdated: '2026-10-14T18:17:03.997' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-37454' references: - url: 'https://csrc.nist.gov/projects/hash-functions/sha-3-project' label: cve@mitre.org - url: 'https://eprint.iacr.org/2023/331' label: cve@mitre.org - url: 'https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2022/10/msg00041.html' label: cve@mitre.org - url: 'https://lists.debian.org/debian-lts-announce/2022/11/msg00000.html' label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/ label: cve@mitre.org - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/ label: cve@mitre.org - url: 'https://mouha.be/sha-3-buffer-overflow/' label: cve@mitre.org - url: 'https://news.ycombinator.com/item?id=33281106' label: cve@mitre.org - url: 'https://news.ycombinator.com/item?id=35050307' label: cve@mitre.org - url: 'https://security.gentoo.org/glsa/202305-02' label: cve@mitre.org - url: 'https://www.debian.org/security/2022/dsa-5267' label: cve@mitre.org - url: 'https://www.debian.org/security/2022/dsa-5269' label: cve@mitre.org - url: 'https://csrc.nist.gov/projects/hash-functions/sha-3-project' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://eprint.iacr.org/2023/331' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2022/10/msg00041.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2022/11/msg00000.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/ label: af854a3a-2127-422b-91ae-364da2661108 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/ label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://mouha.be/sha-3-buffer-overflow/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://news.ycombinator.com/item?id=33281106' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://news.ycombinator.com/item?id=35050307' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.gentoo.org/glsa/202305-02' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.netapp.com/advisory/ntap-20230203-0001/' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.debian.org/security/2022/dsa-5267' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://www.debian.org/security/2022/dsa-5269' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-455250.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-806742.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://nvd.nist.gov/vuln/detail/CVE-2022-37454' - url: 'https://github.com/XKCP/XKCP/issues/105' - url: 'https://github.com/johanns/sha3/issues/17' - url: 'https://github.com/tiran/pysha3/issues/29' - url: >- https://github.com/XKCP/XKCP/commit/fdc6fef075f4e81d6b1bc38364248975e08e340a - url: >- https://github.com/johanns/sha3/commit/5f2e8118a62831911703c8753ff2435c3b5d7312 - url: 'https://mouha.be/sha-3-buffer-overflow' - url: >- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4 - url: >- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4 - url: >- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ - url: >- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sha3/CVE-2022-37454.yml tags: - nvd - osv - pip - cve.org - exploit-available epss: 0.07413 epssPercentile: 0.94409 aliases: - GHSA-6w4m-2xhg-2658 - BIT-libphp-2022-37454 - BIT-libpython-2022-37454 - BIT-php-2022-37454 - BIT-php-min-2022-37454 - BIT-python-2022-37454 - BIT-python-min-2022-37454 - PSF-2022-11 - PYSEC-2026-504 ecosystem: pip ingestedAt: '2026-07-08T18:25:46.543Z' exploitAvailable: true ssvc: exploitation: poc automatable: 'yes' technicalImpact: total timestamp: '2025-05-08T15:03:12.969240Z' --- ## Overview The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface. ## Affected - `extended_keccak_code_package` - `debian_linux = 10.0` - `debian_linux = 11.0` - `fedora = 35` - `fedora = 36` - `php >= 7.2.0, < 7.4.33` - `php >= 8.0.0, < 8.0.25` - `php >= 8.1.0, < 8.1.12` - `python >= 3.6.0, < 3.7.16` - `python >= 3.8.0, < 3.8.16` - `python >= 3.9.0, < 3.9.16` - `python >= 3.10.0, < 3.10.9` - `sha3 < 1.0.5` - `pysha3` - `pypy >= 7.0.0` ## Remediation Upgrade past the affected range: - `php 8.1.12` - `python 3.10.9` - `sha3 1.0.5` ## Package advisory (CVE-2022-37454) Affected packages: - `pysha3 <= 1.0.2` - `sha3 < 1.0.5` Patched in: - `sha3 1.0.5` Source: https://osv.dev/vulnerability/GHSA-6w4m-2xhg-2658