/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2022-37454

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-37454

CGA ID

CGA-r7pg-q2hj-vp3j

Severity

9.8

Critical

CVSS V3

Description

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

References

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images