Skip to content
OpenAdvisories
Critical RHSA-2023:0004 1 CVE

Red Hat Security Advisory: bcel security update

Published Sep 13, 2024 · Updated Oct 2, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 9.0 EUS rhel_eus:9.0::appstream bcel 0:6.4.1-9.el9_0

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-42920

    Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

    Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pa…

    Apache Software Foundation Apache Commons BCEL bcel bcel Debian Ubuntu Azure Linux Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2142707
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0004.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-42920
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-42920
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-42920
  • article
    https://lists.apache.org/thread/lfxk7q8qmnh5bt9jm6nmjlv5hsxjhrz4