The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-jsonUpgrade php-commonUpgrade php-soapUpgrade php-bcmathUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-pecl-xdebugUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-dbaUpgrade php-pgsqlUpgrade php-pecl-rrdUpgrade php-mbstringUpgrade php-fpmUpgrade php-gmpUpgrade php-xmlUpgrade php-cliUpgrade php-opcacheUpgrade php-processUpgrade php-snmpUpgrade php-pecl-xdebug3Upgrade php-develUpgrade php-pearUpgrade php-gdUpgrade phpUpgrade php-ldapUpgrade php-ffiUpgrade libzip-develUpgrade php-embeddedUpgrade libzip-toolsUpgrade libzipUpgrade apcu-panelUpgrade php-enchantUpgrade php-mysqlndUpgrade php-intlUpgrade php-pecl-zip | Feb 22, 2023 | Oct 21, 2022 |
| Alpine Linux | — | Upgrade php7Upgrade php81Upgrade python3Upgrade php8Upgrade php82 | Mar 26, 2024 | Oct 21, 2022 |
| Amazon Linux Ami 2 | — | Upgrade php-mbstringUpgrade php-debuginfoUpgrade php-pgsqlUpgrade php-processUpgrade python3-libsUpgrade python3-debuginfoUpgrade php-commonUpgrade php-xmlUpgrade python38-libsUpgrade php-dbaUpgrade python38Upgrade python38-debuginfoUpgrade python3-testUpgrade python3-toolsUpgrade php-fpmUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-develUpgrade php-intlUpgrade phpUpgrade php-bcmathUpgrade php-enchantUpgrade python3-tkinterUpgrade python38-toolsUpgrade python38-develUpgrade python38-tkinterUpgrade php-odbcUpgrade python3-debugUpgrade php-dbgUpgrade php-soapUpgrade php-pspellUpgrade php-embeddedUpgrade php-ldapUpgrade php-gmpUpgrade php-sodiumUpgrade php-gdUpgrade php-cliUpgrade python3-develUpgrade python3Upgrade python38-testUpgrade php-snmpUpgrade python38-debugUpgrade php-pdo | Dec 7, 2022 | Oct 21, 2022 |
| Amazon_linux | — | Upgrade python36Upgrade python38 | Dec 10, 2022 | Oct 21, 2022 |
| Amazon_linux_2023 | — | Upgrade php8.1-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-dbgUpgrade php8.1-develUpgrade php8.1-mysqlndUpgrade php8.1-embeddedUpgrade php8.1-debugsourceUpgrade php8.1-cliUpgrade php8.1-tidy-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.1-soapUpgrade php8.1-bcmath-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.1-pdoUpgrade php8.1-mbstringUpgrade php8.1Upgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-intlUpgrade php8.1-enchant-debuginfoUpgrade php8.1-gd-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-enchantUpgrade php8.1-odbcUpgrade php8.1-ldapUpgrade php8.1-fpmUpgrade php8.1-bcmathUpgrade php8.1-opcache-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-ffiUpgrade php8.1-gdUpgrade php8.1-commonUpgrade php8.1-opcacheUpgrade php8.1-pgsqlUpgrade php8.1-soap-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.1-dba-debuginfoUpgrade php8.1-dbaUpgrade php8.1-process-debuginfoUpgrade php8.1-common-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.1-tidyUpgrade php8.1-processUpgrade php8.1-gmpUpgrade php8.1-ldap-debuginfoUpgrade php8.1-xml-debuginfoUpgrade php8.1-xml | Feb 17, 2025 | Oct 20, 2022 |
| Centos_linux | — | Upgrade php-commonUpgrade php-enchant-debuginfoUpgrade php-pecl-xdebugUpgrade php-ffiUpgrade php-opcacheUpgrade php-pecl-apcu-debugsourceUpgrade php-cliUpgrade php-pecl-xdebug3-debuginfoUpgrade libzip-toolsUpgrade php-intlUpgrade php-pecl-zip-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-odbcUpgrade php-pecl-xdebug3Upgrade php-snmpUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade apcu-panelUpgrade libzip-debuginfoUpgrade php-intl-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-common-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-json-debuginfoUpgrade php-debuginfoUpgrade php-mbstringUpgrade php-pgsqlUpgrade php-mysqlndUpgrade php-soap-debuginfoUpgrade php-ldap-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade libzip-develUpgrade php-dba-debuginfoUpgrade php-xml-debuginfoUpgrade php-pearUpgrade php-xmlUpgrade php-opcache-debuginfoUpgrade php-odbc-debuginfoUpgrade php-fpmUpgrade php-enchantUpgrade php-pdo-debuginfoUpgrade php-debugsourceUpgrade php-dbaUpgrade php-bcmathUpgrade libzip-tools-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade php-snmp-debuginfoUpgrade libzip-debugsourceUpgrade php-dbg-debuginfoUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pecl-zipUpgrade php-gmp-debuginfoUpgrade php-gd-debuginfoUpgrade php-develUpgrade php-process-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pdoUpgrade php-ldapUpgrade php-fpm-debuginfoUpgrade php-ffi-debuginfoUpgrade php-embedded-debuginfoUpgrade php-pecl-apcu-develUpgrade php-soapUpgrade php-processUpgrade php-gmpUpgrade php-cli-debuginfoUpgrade phpUpgrade php-jsonUpgrade php-pecl-zip-debugsourceUpgrade libzipUpgrade php-embeddedUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-rrd | Feb 22, 2023 | Oct 21, 2022 |
| Debian | — | Upgrade php7.4Upgrade python3.9Upgrade pypy3Upgrade pysha3 | Nov 1, 2022 | Oct 21, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/php.Upgrade dev-lang/python.Upgrade dev-python/pypy3. | Nov 23, 2022 | Oct 21, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3Upgrade python3-fgoUpgrade python3-unversioned-command | Feb 13, 2023 | Oct 21, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-develUpgrade python3-unversioned-commandUpgrade python3-libsUpgrade python3-testUpgrade python3 | Feb 9, 2023 | Oct 21, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3Upgrade python3-unversioned-command | Mar 9, 2023 | Oct 21, 2022 |
| Oracle Missing Cpu Apr 2023 | — | Apply the April 2023 Critical Patch Update (CPU) for Oracle Database | Sep 1, 2026 | Oct 21, 2022 |
| Oracle_linux | — | Upgrade php-pecl-rrdUpgrade php-pearUpgrade php-develUpgrade php-fpmUpgrade php-commonUpgrade php-pgsqlUpgrade php-xmlrpcUpgrade php-pecl-xdebug3Upgrade php-odbcUpgrade php-processUpgrade libzip-toolsUpgrade php-pecl-xdebugUpgrade php-mbstringUpgrade libzipUpgrade php-enchantUpgrade php-intlUpgrade phpUpgrade php-embeddedUpgrade php-snmpUpgrade php-gdUpgrade libzip-develUpgrade php-dbaUpgrade php-xmlUpgrade php-mysqlndUpgrade php-soapUpgrade php-bcmathUpgrade php-cliUpgrade php-jsonUpgrade apcu-panelUpgrade php-pecl-apcuUpgrade php-dbgUpgrade php-ldapUpgrade php-opcacheUpgrade php-pecl-zipUpgrade php-pdoUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-ffi | Feb 23, 2023 | Oct 20, 2022 |
| Php | — | Upgrade to PHP version 8.0.25Upgrade to PHP version 7.4.33Upgrade to PHP version 8.1.12 | Jan 17, 2023 | Oct 21, 2022 |
| Redhat_linux | — | Upgrade php-opcacheUpgrade php-pecl-rrd-debugsourceUpgrade php-enchant-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-pecl-xdebug3-debuginfoUpgrade libzip-toolsUpgrade php-intlUpgrade php-odbcUpgrade php-snmp-debuginfoUpgrade libzip-develUpgrade php-cliUpgrade php-opcache-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-intl-debuginfoUpgrade php-debuginfoUpgrade php-ldap-debuginfoUpgrade libzip-debuginfoUpgrade php-mbstring-debuginfoUpgrade php-xmlUpgrade php-pecl-xdebug3Upgrade apcu-panelUpgrade php-pecl-apcu-debugsourceUpgrade php-soap-debuginfoUpgrade php-snmpNo solution existsUpgrade php-mysqlndUpgrade php-ffiUpgrade php-json-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-xdebug-debugsourceUpgrade php-commonUpgrade php-dba-debuginfoUpgrade php-pecl-zip-debuginfoUpgrade php-dbgUpgrade php-embedded-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-cli-debuginfoUpgrade php-odbc-debuginfoUpgrade php-jsonUpgrade php-develUpgrade php-gdUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-pgsqlUpgrade php-fpmUpgrade libzip-debugsourceUpgrade php-enchantUpgrade php-gmp-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pearUpgrade php-dbaUpgrade php-pecl-rrdUpgrade php-process-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-embeddedUpgrade libzip-tools-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-pecl-apcuUpgrade php-gd-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-gmpUpgrade php-ffi-debuginfoUpgrade php-ldapUpgrade php-pdoUpgrade php-processUpgrade php-pdo-debuginfoUpgrade php-xmlrpc-debuginfoUpgrade phpUpgrade libzipUpgrade php-debugsourceUpgrade php-pecl-xdebugUpgrade php-xml-debuginfoUpgrade php-soapUpgrade php-pecl-zip | Feb 22, 2023 | Oct 21, 2022 |
| Rocky_linux | — | Upgrade php-processUpgrade phpUpgrade libzip-tools-debuginfoUpgrade php-pecl-rrdUpgrade php-gdUpgrade php-bcmathUpgrade php-pecl-apcu-develUpgrade php-ldapUpgrade php-fpmUpgrade php-process-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-pdoUpgrade php-gmp-debuginfoUpgrade php-gmpUpgrade php-fpm-debuginfoUpgrade php-pgsqlUpgrade php-ffi-debuginfoUpgrade php-enchantUpgrade php-dbaUpgrade php-pecl-xdebugUpgrade php-jsonUpgrade php-embeddedUpgrade php-xmlrpc-debuginfoUpgrade php-pecl-rrd-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-gd-debuginfoUpgrade php-debugsourceUpgrade php-embedded-debuginfoUpgrade php-develUpgrade php-pecl-zip-debugsourceUpgrade php-odbc-debuginfoUpgrade php-soapUpgrade php-debuginfoUpgrade libzip-develUpgrade php-mysqlndUpgrade php-commonUpgrade php-intl-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pdo-debuginfoUpgrade libzip-debugsourceUpgrade php-cli-debuginfoUpgrade php-pecl-zipUpgrade php-pecl-xdebug3-debugsourceUpgrade libzip | Mar 12, 2024 | Oct 21, 2022 |
| Suse | — | Upgrade php8-exifUpgrade php8-sqliteUpgrade php7-fastcgiUpgrade php8-xmlreaderUpgrade php8-enchantUpgrade python3-doc-devhelpUpgrade python310-doc-devhelpUpgrade php8-opensslUpgrade python3-testsuiteUpgrade python39-develUpgrade php7-sysvsemUpgrade php8-sysvshmUpgrade php74-tokenizerUpgrade php8-embedUpgrade php8-sodiumUpgrade php7-xmlwriterUpgrade php74-enchantUpgrade php74-gdUpgrade python3-dbmUpgrade php8-snmpUpgrade python310-dbmUpgrade python310-docUpgrade python36Upgrade php7-pearUpgrade php7-iconvUpgrade php7-zlibUpgrade php74-readlineUpgrade php7-bcmathUpgrade python310-develUpgrade php7-ctypeUpgrade php74-sysvshmUpgrade php8-gmpUpgrade python39-doc-devhelpUpgrade php7-pgsqlUpgrade php8-socketsUpgrade php7-pcntlUpgrade php74-pdoUpgrade libpython3_10-1_0Upgrade php7-pharUpgrade php74-tidyUpgrade php7-testUpgrade php74-curlUpgrade php74-xslUpgrade php7-opcacheUpgrade php7-wddxUpgrade php8-fastcgiUpgrade php74-gettextUpgrade php8-calendarUpgrade python310-cursesUpgrade php8-ldapUpgrade php8-bcmathUpgrade python36-baseUpgrade php74-opcacheUpgrade php74-shmopUpgrade php74-sqliteUpgrade php74-pcntlUpgrade php8-shmopUpgrade php8-fileinfoUpgrade php74-develUpgrade php74-fastcgiUpgrade php74-bz2Upgrade php74-xmlwriterUpgrade php74-snmpUpgrade php8-pharUpgrade php7-curlUpgrade python310-base-32bitUpgrade libpython3_6m1_0Upgrade php7-calendarUpgrade php7-ftpUpgrade php74-dbaUpgrade libpython3_9-1_0Upgrade python39-docUpgrade python310-baseUpgrade python3-toolsUpgrade python39-baseUpgrade php7-tokenizerUpgrade php8-posixUpgrade php7-fileinfoUpgrade python39-base-32bitUpgrade php8-intlUpgrade python39-tkUpgrade php8-testUpgrade php74-sodiumUpgrade python310-32bitUpgrade php7-enchantUpgrade php7-pdoUpgrade php7-sysvmsgUpgrade php7-intlUpgrade php74-odbcUpgrade php74-socketsUpgrade php7-snmpUpgrade apache2-mod_php74Upgrade python310-idleUpgrade php7-fpmUpgrade php74-fpmUpgrade php74-sysvsemUpgrade php8-bz2Upgrade libpython3_10-1_0-32bitUpgrade python3-cursesUpgrade apache2-mod_php7Upgrade php74-mysqlUpgrade python39-toolsUpgrade php74-zipUpgrade php74-fileinfoUpgrade php7-soapUpgrade php74-ctypeUpgrade php8-zipUpgrade php7-firebirdUpgrade php7-cliUpgrade php74-jsonUpgrade php8-dbaUpgrade python310Upgrade php74-pgsqlUpgrade php7-sodiumUpgrade php8-pdoUpgrade libpython3_9-1_0-32bitUpgrade php8-ftpUpgrade php7-domUpgrade php8-cliUpgrade php7-posixUpgrade php7-ldapUpgrade python39-cursesUpgrade python3-docUpgrade python3-tkUpgrade php8-xslUpgrade php8-tokenizerUpgrade php8-opcacheUpgrade php8-odbcUpgrade php8-iconvUpgrade php8Upgrade php7-zipUpgrade php7-sqliteUpgrade php74-gmpUpgrade php8-gdUpgrade php74-ftpUpgrade php8-fpmUpgrade php74-ldapUpgrade php74-exifUpgrade php7-mysqlUpgrade php7-xslUpgrade php7-gettextUpgrade php7-exifUpgrade php74-zlibUpgrade python310-tkUpgrade php8-readlineUpgrade python310-testsuiteUpgrade php74Upgrade php7-opensslUpgrade php74-posixUpgrade php74-opensslUpgrade php7-jsonUpgrade php8-develUpgrade php7-mbstringUpgrade php8-sysvsemUpgrade php74-mbstringUpgrade php8-soapUpgrade python39-dbmUpgrade python310-toolsUpgrade php8-zlibUpgrade php8-pcntlUpgrade php8-domUpgrade php7-readlineUpgrade php74-pharUpgrade php7-sysvshmUpgrade php7-gmpUpgrade php7-gdUpgrade php7-embedUpgrade php7Upgrade python3-baseUpgrade php74-soapUpgrade python3-idleUpgrade php7-bz2Upgrade php7-odbcUpgrade python39-testsuiteUpgrade libpython3_6m1_0-32bitUpgrade php74-xmlrpcUpgrade php7-dbaUpgrade python39Upgrade php7-develUpgrade python3-develUpgrade php8-ctypeUpgrade php8-curlUpgrade python3Upgrade php8-xmlwriterUpgrade php7-shmopUpgrade apache2-mod_php8Upgrade php74-bcmathUpgrade php74-iconvUpgrade php7-xmlrpcUpgrade php7-tidyUpgrade php8-mbstringUpgrade php8-sysvmsgUpgrade php7-pear-archive_tarUpgrade php7-socketsUpgrade php8-pgsqlUpgrade php74-intlUpgrade php8-gettextUpgrade php8-mysqlUpgrade php74-calendarUpgrade php74-domUpgrade python39-32bitUpgrade python36-develUpgrade php8-tidyUpgrade python39-idleUpgrade php74-sysvmsgUpgrade php74-xmlreaderUpgrade php7-xmlreader | Nov 10, 2022 | Oct 21, 2022 |
| Ubuntu | — | Upgrade php8.1-cliUpgrade python3.10Upgrade libapache2-mod-php8.1Upgrade libpython3.8Upgrade python2.7Upgrade php7.4-cliUpgrade pypy3Upgrade python3-sha3Upgrade libpython3.6Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade libpython2.7Upgrade libpython3.10Upgrade php7.4-cgiUpgrade python3.9 (Ubuntu Pro)Upgrade php8.1-cgiUpgrade python3.6Upgrade python3.7 (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade libapache2-mod-php7.4Upgrade php7.4-zipUpgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.8Upgrade php8.1Upgrade php8.1-zipUpgrade libapache2-mod-php8.0Upgrade php7.4 | Nov 9, 2022 | Oct 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub