ALPINE-CVE-2022-37454

ALPINE-CVE-2022-37454

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

CVSS 9.8 · Critical · Fix available

Published

2022-10-21T06:15:09.333Z

Updated

2026-10-15T07:17:54.242286319Z

Stack: system

Check your server →