Skip to content
OpenAdvisories
High ELSA-2022-8958 1 CVE

Important: bcel security update (Oracle Linux 7)

Published Dec 14, 2022 · Updated Dec 14, 2022

Ecosystem: Oracle Linux

Summary

[0:5.2-19]
- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 bcel 0:5.2-19.el7_9
Oracle Linux · 7 bcel-javadoc 0:5.2-19.el7_9

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-42920

    Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

    Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pa…

    Apache Software Foundation Apache Commons BCEL bcel bcel Debian Ubuntu Azure Linux Maven