- Vulnerability/
- USN-6525-1
USN-6525-1: pysha3 vulnerability
First published: Wed Nov 29 2023(Updated: )
Nicky Mouha discovered that pysha incorrectly handled certain SHA-3 operations. An attacker could possibly use this issue to cause pysha3 to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/python3-sha3 | <1.0.2-4.2ubuntu0.22.04.1 | 1.0.2-4.2ubuntu0.22.04.1 |
| =22.04 | ||
| All of | ||
| ubuntu/python3-sha3 | <1.0.2-4ubuntu0.1 | 1.0.2-4ubuntu0.1 |
| =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2022-37454
- https://ubuntu.com/security/notices/USN-5717-1
- https://ubuntu.com/security/notices/USN-5767-1
- https://ubuntu.com/security/notices/USN-5888-1
- https://ubuntu.com/security/notices/USN-5767-3
- https://ubuntu.com/security/notices/USN-5930-1
- https://ubuntu.com/security/notices/USN-5931-1
- https://ubuntu.com/security/notices/USN-6524-1
- https://launchpad.net/ubuntu/+source/pysha3/1.0.2-4.2ubuntu0.22.04.1
- https://launchpad.net/ubuntu/+source/pysha3/1.0.2-4ubuntu0.1
- https://ubuntu.com/security/notices/USN-6525-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID of USN-6525-1?
The vulnerability ID of USN-6525-1 is CVE-2022-37454.
What is the impact of the pysha3 vulnerability?
The pysha3 vulnerability can result in a denial of service or possible execution of arbitrary code.
Which software versions are affected by the pysha3 vulnerability?
The pysha3 vulnerability affects python3-sha3 version 1.0.2-4.2ubuntu0.22.04.1 on Ubuntu 22.04 and version 1.0.2-4ubuntu0.1 on Ubuntu 20.04.
How can I fix the pysha3 vulnerability?
To fix the pysha3 vulnerability, update the python3-sha3 package to the recommended version provided by Ubuntu.
Where can I find more information about the pysha3 vulnerability?
You can find more information about the pysha3 vulnerability in the Ubuntu security notices USN-5717-1 and USN-5767-1.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-5717-1
- anchor-related/USN-5767-1
- anchor-related/USN-5888-1
- anchor-related/USN-5767-3
- anchor-related/USN-5930-1
- anchor-related/USN-5931-1
- anchor-related/USN-6524-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04