Lucene search
+L

110 matches found

Tenable Nessus
Tenable Nessus
added 2022/12/07 12:0 a.m.34 views

SUSE SLES12 Security Update : bcel (SUSE-SU-2022:4331-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4331-1 advisory. - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing bsc1205125. Tenable has extracted the preceding description...

9.8CVSS7AI score0.02836EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/06 12:34 p.m.9 views

SUSE-SU-2022:4331-1 Security update for bcel

This update for bcel fixes the following issues: - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing bsc1205125...

9.8CVSS9.5AI score0.02836EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/12/02 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2022:4306-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.02836EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/02 12:0 a.m.35 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bcel (SUSE-SU-2022:4306-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4306-1 advisory. - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing bsc1205125. Tenable has...

9.8CVSS7AI score0.02836EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/01 8:27 a.m.5 views

SUSE-SU-2022:4306-1 Security update for bcel

This update for bcel fixes the following issues: - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing bsc1205125...

9.8CVSS9.5AI score0.02836EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2022/11/15 1:55 a.m.85 views

CVE-2022-42920

An out-of-bounds OOB write flaw was found in Apache Commons BCEL API. This flaw can be used to produce arbitrary bytecode and may abuse applications that pass attacker-controlled data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected...

9.8CVSS9.2AI score0.02836EPSS
SaveExploits0References4
Veracode
Veracode
added 2022/11/08 7:11 a.m.42 views

Out-of-bound Write

Apache Commons BCEL is vulnerable to Out-of-bound Write. The vulnerability is due to ConstantPool.java and ConstantPoolGen.java improperly handing MAXCPENTRIES which allows an attacker to pass data to specific APIs and control the resulting bytecode causing out-of-bound writes...

9.8CVSS8.9AI score0.02836EPSS
SaveExploits0References14Affected Software1
vulnersOsv
vulnersOsv
added 2022/11/07 7:0 p.m.6 views

at.datenwort.commons:jmodel2ts-app (>=0.1 <=0.12), ch.heia-fr.isc.data-cockpit:experiments (>=1.0.0 <=1.1.0) +974 more potentially affected by CVE-2022-42920 via org.apache.bcel:bcel (>=5.2 <=6.5.0)

org.apache.bcel:bcel MAVEN version =5.2, =0.1, =1.0.0, =1.0.1, =1.0.0, =0.1.4-jdk17-RELEASES, =4.2.1, =0.0.1, =1.1.0, =0.2.0, =0.1.31, =0.5.0, =0.5.0, =1.10.0, =2.0.0, =3.0.0.rc1, =3.2.1 and more Source cves: CVE-2022-42920 Source advisory: OSV:GHSA-97XG-PHPR-RG8Q...

9.8CVSS6.7AI score0.02836EPSS
SaveExploits0
OSV
OSV
added 2022/11/07 7:0 p.m.247 views

GHSA-97XG-PHPR-RG8Q Apache Commons BCEL vulnerable to out-of-bounds write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS9.6AI score0.02836EPSS
SaveExploits0References13
Github Security Blog
Github Security Blog
added 2022/11/07 7:0 p.m.71 views

Apache Commons BCEL vulnerable to out-of-bounds write

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS9AI score0.02836EPSS
SaveExploits0References13Affected Software1
NVD
NVD
added 2022/11/07 1:15 p.m.30 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS0.02836EPSS
SaveExploits0References6
OSV
OSV
added 2022/11/07 1:15 p.m.1 views

DEBIAN-CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS7.5AI score0.02836EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/11/07 1:15 p.m.3 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS5.9AI score0.02836EPSS
SaveExploits0References10
Prion
Prion
added 2022/11/07 1:15 p.m.49 views

Out-of-bounds

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

7.5CVSS9.3AI score0.02836EPSS
SaveExploits0References6Affected Software2
CNNVD
CNNVD
added 2022/11/07 12:0 a.m.4 views

Apache Commons BCEL 缓冲区错误漏洞

Apache Commons BCEL is the United States Apache Apache Foundation of a byte code engineering library . It is designed to provide users with a convenient way to analyze, create and manipulate binary Java classes. A buffer error vulnerability exists in Apache Commons BCEL, which stems from an...

9.8CVSS7.7AI score0.02836EPSS
SaveExploits0References18
OSV
OSV
added 2022/11/07 12:0 a.m.42 views

CVE-2022-42920 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

6.9AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2022/11/07 12:0 a.m.52 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS7.4AI score0.02836EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2022/11/07 12:0 a.m.63 views

CVE-2022-42920

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.8CVSS6.9AI score0.02836EPSS
SaveExploits0References7
CVE
CVE
added 2022/11/07 12:0 a.m.347 views

CVE-2022-42920

The CVE-2022-42920 issue affects Apache Commons BCEL. The vulnerability arises from an out-of-bounds write in multiple BCEL APIs that modify class characteristics, allowing attacker-controlled data to produce arbitrary bytecode. This could enable an attacker to gain higher control over the genera...

9.8CVSS9AI score0.02836EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2022/11/07 12:0 a.m.33 views

CVE-2022-42920 Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those...

9.7AI score0.02836EPSS
SaveExploits0References6
Rows per page
Query Builder