vulnerability

Huawei EulerOS: CVE-2022-37454: python3 security update

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Oct 21, 2022

Added

Feb 13, 2023

Modified

Apr 1, 2026

Description

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.

Solutions

huawei-euleros-2_0_sp10-upgrade-python3huawei-euleros-2_0_sp10-upgrade-python3-fgohuawei-euleros-2_0_sp10-upgrade-python3-unversioned-command

References

CVE-2022-37454
https://attackerkb.com/topics/CVE-2022-37454
CWE-190
EULEROS-EulerOS-SA-2023-1396
EUVD-EUVD-2023-1219
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1219

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report