Skip to content
OpenAdvisories
Critical RHSA-2022:8958 1 CVE

Red Hat Security Advisory: bcel security update

Published Sep 13, 2024 · Updated Oct 2, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client bcel 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client bcel-javadoc 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode bcel 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode bcel-javadoc 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server bcel 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server bcel-javadoc 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation bcel 0:5.2-19.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation bcel-javadoc 0:5.2-19.el7_9

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-42920

    Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

    Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pa…

    Apache Software Foundation Apache Commons BCEL bcel bcel Debian Ubuntu Azure Linux Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2142707
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8958.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-42920
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-42920
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-42920
  • article
    https://lists.apache.org/thread/lfxk7q8qmnh5bt9jm6nmjlv5hsxjhrz4