The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:0005 advisory.

  - Apache Commons BCEL has a number of APIs that would normally only allow changing specific class     characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce     arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those     APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to     Apache Commons BCEL 6.6.0. (CVE-2022-42920)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9 : bcel (ALSA-2023:0005)

critical Nessus Plugin ID 169491

Version 1.0