https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:02:53 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:0005 <p><strong>Affected:</strong> AlmaLinux:9: bcel</p> <p>The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).</p> <p>Security Fix(es):</p> <p>* Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: bcel</p> <p>The Byte Code Engineering Library (Apache Commons BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).</p> <p>Security Fix(es):</p> <p>* Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing (CVE-2022-42920)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:0005 https://cve.radiocsirt.org/vuln/bdu:2024-02279 bdu:2024-02279 https://cve.radiocsirt.org/vuln/bdu:2024-02279 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0034 certfr-2023-avi-0034 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0034 https://cve.radiocsirt.org/vuln/euvd-2026-19611 EUVD-2026-19611 https://cve.radiocsirt.org/vuln/euvd-2026-19611 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42920 <p>Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.</p> <p>Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-42920 https://cve.radiocsirt.org/vuln/ghsa-97xg-phpr-rg8q <p><strong>Affected:</strong> Maven: org.apache.bcel:bcel</p> <p>Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.</p> <p><strong>Affected:</strong> Maven: org.apache.bcel:bcel</p> <p>Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.</p> https://cve.radiocsirt.org/vuln/ghsa-97xg-phpr-rg8q https://cve.radiocsirt.org/vuln/gsd-2022-42920 gsd-2022-42920 https://cve.radiocsirt.org/vuln/gsd-2022-42920 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12498-1 <p>bcel5_3-5.3-21.1 on GA media</p> <p>bcel5_3-5.3-21.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12498-1 https://cve.radiocsirt.org/vuln/rhsa-2022:8959 <p>Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing</p> <p>Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8959 https://cve.radiocsirt.org/vuln/suse-su-2022:4331-1 <p>Security update for bcel</p> <p>Security update for bcel</p> https://cve.radiocsirt.org/vuln/suse-su-2022:4331-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-42920 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bcel, Ubuntu:Pro:18.04:LTS: bcel, Ubuntu:Pro:20.04:LTS: bcel, Ubuntu:22.04:LTS: bcel</p> <p>Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: bcel, Ubuntu:Pro:18.04:LTS: bcel, Ubuntu:Pro:20.04:LTS: bcel, Ubuntu:22.04:LTS: bcel</p> <p>Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-42920 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1961 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1961