Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:4331-1

Опубликовано: 06 дек. 2022
Источник: suse-cvrf

Описание

Security update for bcel

This update for bcel fixes the following issues:

  • CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing (bsc#1205125).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
bcel-5.2-28.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
bcel-5.2-28.3.1

Ссылки

Описание

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:bcel-5.2-28.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:bcel-5.2-28.3.1
Ссылки