{"id":"UBUNTU-CVE-2022-24795","details":"yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at `yajl_buf.c#L64` may result in the `need` 32bit integer wrapping to 0 when `need` approaches a value of 0x80000000 (i.e. ~2GB of data), which results in a reallocation of buf-\u003ealloc into a small heap chunk. These integers are declared as `size_t` in the 2.x branch of `yajl`, which practically prevents the issue from triggering on 64bit platforms, however this does not preclude this issue triggering on 32bit builds on which `size_t` is a 32bit integer. Subsequent population of this under-allocated heap chunk is based on the original buffer size, leading to heap memory corruption. This vulnerability mostly impacts process availability. Maintainers believe exploitation for arbitrary code execution is unlikely. A patch is available and anticipated to be part of yajl-ruby version 1.4.2. As a workaround, avoid passing large inputs to YAJL.","modified":"2026-05-20T16:07:51.921927180Z","published":"2022-04-05T16:15:00Z","related":["USN-6233-1","USN-6233-2"],"upstream":["CVE-2022-24795"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-24795"},{"type":"REPORT","url":"https://github.com/brianmario/yajl-ruby/pull/211"},{"type":"REPORT","url":"https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6233-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6233-2"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2022-24795"}],"affected":[{"package":{"name":"yajl","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/yajl?arch=source&distro=trusty%2Fesm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-4ubuntu0.1~esm1"}]}],"versions":["2.0.4-4"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_version":"2.0.4-4ubuntu0.1~esm1","binary_name":"libyajl2"},{"binary_name":"yajl-tools","binary_version":"2.0.4-4ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"yajl","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/yajl?arch=source&distro=esm-infra%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.16.04.1~esm1"}]}],"versions":["2.1.0-2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.1.0-2ubuntu0.16.04.1~esm1","binary_name":"libyajl2"},{"binary_version":"2.1.0-2ubuntu0.16.04.1~esm1","binary_name":"yajl-tools"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.0+repack-4","1.8.2+repack-1","1.8.3+repack-1","1.8.3+repack-2"],"ecosystem_specific":{"binaries":[{"binary_name":"argyll","binary_version":"1.8.3+repack-2"},{"binary_name":"argyll-ref","binary_version":"1.8.3+repack-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/burp?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.48-4.1","1.3.48-4.1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"burp","binary_version":"1.3.48-4.1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"collada2gltf","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/collada2gltf?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20140924-3"],"ecosystem_specific":{"binaries":[{"binary_name":"libcollada2gltfconvert-dev","binary_version":"20140924-3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-1build1","2.3.11-1","2.4.0-1","2.4.1-1","2.4.1-2","2.4.1-2ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_version":"2.4.1-2ubuntu1","binary_name":"icinga2"},{"binary_version":"2.4.1-2ubuntu1","binary_name":"icinga2-bin"},{"binary_name":"icinga2-classicui","binary_version":"2.4.1-2ubuntu1"},{"binary_name":"icinga2-common","binary_version":"2.4.1-2ubuntu1"},{"binary_name":"icinga2-ido-mysql","binary_version":"2.4.1-2ubuntu1"},{"binary_name":"icinga2-ido-pgsql","binary_version":"2.4.1-2ubuntu1"},{"binary_name":"icinga2-studio","binary_version":"2.4.1-2ubuntu1"},{"binary_version":"2.4.1-2ubuntu1","binary_name":"libicinga2"},{"binary_name":"vim-icinga2","binary_version":"2.4.1-2ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"libbson","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/libbson?arch=source&distro=esm-apps%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1","1.3.1-1ubuntu0.1~esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"libbson-1.0-0","binary_version":"1.3.1-1ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.0-3build1"],"ecosystem_specific":{"binaries":[{"binary_name":"lnav","binary_version":"0.7.0-3build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.2-2~ubuntu1","1.1.5-1~build1"],"ecosystem_specific":{"binaries":[{"binary_name":"php-mongodb","binary_version":"1.1.5-1~build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.19-1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.9.19-1","binary_name":"r-cran-jsonlite"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-3build1","1.2.0-3build2","1.2.0-3build3","1.2.0-3build4"],"ecosystem_specific":{"binaries":[{"binary_version":"1.2.0-3build4","binary_name":"ruby-yajl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"tulip","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/tulip?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0dfsg-1ubuntu1","4.7.0dfsg-1ubuntu2","4.7.0dfsg-2ubuntu1","4.7.0dfsg-2ubuntu2","4.8.0dfsg-1","4.8.0dfsg-1build1","4.8.0dfsg-2","4.8.0dfsg-2build1","4.8.0dfsg-2build2"],"ecosystem_specific":{"binaries":[{"binary_name":"libgzstream-tulip-4.8-0","binary_version":"4.8.0dfsg-2build2"},{"binary_name":"libogdf-tulip-4.8-0","binary_version":"4.8.0dfsg-2build2"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libquazip-tulip-4.8-1"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libqxt-tulip-4.8-0"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libtess2-tulip-4.8"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libtulip-core-4.8"},{"binary_name":"libtulip-gui-4.8","binary_version":"4.8.0dfsg-2build2"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libtulip-ogdf-4.8"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libtulip-ogl-4.8"},{"binary_name":"libtulip-python-4.8","binary_version":"4.8.0dfsg-2build2"},{"binary_version":"4.8.0dfsg-2build2","binary_name":"libyajl-tulip-4.8-2"},{"binary_name":"tulip","binary_version":"4.8.0dfsg-2build2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"yajl","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/yajl?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["2.1.0-2","2.1.0-2build1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_version":"2.1.0-2ubuntu0.18.04.1~esm1","binary_name":"libyajl2"},{"binary_version":"2.1.0-2ubuntu0.18.04.1~esm1","binary_name":"yajl-tools"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.2+repack-1","1.9.2+repack-2","2.0.0+repack-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"argyll","binary_version":"2.0.0+repack-1build1"},{"binary_name":"argyll-ref","binary_version":"2.0.0+repack-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/burp?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.54-1","2.0.54-4build1"],"ecosystem_specific":{"binaries":[{"binary_name":"burp","binary_version":"2.0.54-4build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"collada2gltf","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/collada2gltf?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20140924-4"],"ecosystem_specific":{"binaries":[{"binary_version":"20140924-4","binary_name":"libcollada2gltfconvert-dev"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7.0-1","2.8.1-0ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"icinga2","binary_version":"2.8.1-0ubuntu2"},{"binary_name":"icinga2-bin","binary_version":"2.8.1-0ubuntu2"},{"binary_version":"2.8.1-0ubuntu2","binary_name":"icinga2-classicui"},{"binary_name":"icinga2-common","binary_version":"2.8.1-0ubuntu2"},{"binary_name":"icinga2-ido-mysql","binary_version":"2.8.1-0ubuntu2"},{"binary_name":"icinga2-ido-pgsql","binary_version":"2.8.1-0ubuntu2"},{"binary_name":"icinga2-studio","binary_version":"2.8.1-0ubuntu2"},{"binary_name":"libicinga2","binary_version":"2.8.1-0ubuntu2"},{"binary_version":"2.8.1-0ubuntu2","binary_name":"vim-icinga2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"libbson","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/libbson?arch=source&distro=esm-apps%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.0-1","1.8.1-1","1.9.0-1","1.9.2-1","1.9.2-1ubuntu0.1~esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"libbson-1.0-0","binary_version":"1.9.2-1ubuntu0.1~esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.2-3"],"ecosystem_specific":{"binaries":[{"binary_name":"lnav","binary_version":"0.8.2-3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.3-1build1","1.3.4-1build1"],"ecosystem_specific":{"binaries":[{"binary_version":"1.3.4-1build1","binary_name":"php-mongodb"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-1build1","1.5-2"],"ecosystem_specific":{"binaries":[{"binary_name":"r-cran-jsonlite","binary_version":"1.5-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-3build4","1.2.0-3.1","1.3.1-1","1.3.1-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"ruby-yajl","binary_version":"1.3.1-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"yajl","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/yajl?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.20.04.1"}]}],"versions":["2.1.0-3"],"ecosystem_specific":{"binaries":[{"binary_name":"libyajl2","binary_version":"2.1.0-3ubuntu0.20.04.1"},{"binary_version":"2.1.0-3ubuntu0.20.04.1","binary_name":"yajl-tools"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.1+repack-1"],"ecosystem_specific":{"binaries":[{"binary_version":"2.0.1+repack-1","binary_name":"argyll"},{"binary_name":"argyll-ref","binary_version":"2.0.1+repack-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/burp?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.18-2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.2.18-2","binary_name":"burp"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.5-1build1","2.11.2-1","2.11.2-1ubuntu1","2.11.2-1ubuntu2","2.11.2-1ubuntu3"],"ecosystem_specific":{"binaries":[{"binary_name":"icinga2","binary_version":"2.11.2-1ubuntu3"},{"binary_version":"2.11.2-1ubuntu3","binary_name":"icinga2-bin"},{"binary_name":"icinga2-common","binary_version":"2.11.2-1ubuntu3"},{"binary_name":"icinga2-ido-mysql","binary_version":"2.11.2-1ubuntu3"},{"binary_name":"icinga2-ido-pgsql","binary_version":"2.11.2-1ubuntu3"},{"binary_version":"2.11.2-1ubuntu3","binary_name":"vim-icinga2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.4-5build1","0.8.5-2","0.8.5-2build1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.8.5-2build1","binary_name":"lnav"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.5-1build1","1.6.1-4","1.6.1-4build1"],"ecosystem_specific":{"binaries":[{"binary_name":"php-mongodb","binary_version":"1.6.1-4build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6+dfsg-1","1.6.1+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_name":"r-cran-jsonlite","binary_version":"1.6.1+dfsg-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1build1","1.3.1-1build2"],"ecosystem_specific":{"binaries":[{"binary_version":"1.3.1-1build2","binary_name":"ruby-yajl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.1+repack-2","2.2.0+repack-1","2.2.0+repack-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"argyll","binary_version":"2.2.0+repack-1build1"},{"binary_version":"2.2.0+repack-1build1","binary_name":"argyll-ref"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/burp?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.18-8ubuntu2","2.4.0-3ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"burp","binary_version":"2.4.0-3ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"collada2gltf","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/collada2gltf?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["20140924-7build1","20140924-8"],"ecosystem_specific":{"binaries":[{"binary_version":"20140924-8","binary_name":"libcollada2gltfconvert-dev"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.3-1","2.13.1-1","2.13.2-1","2.13.2-1build1","2.13.2-1build2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.13.2-1build2","binary_name":"icinga2"},{"binary_version":"2.13.2-1build2","binary_name":"icinga2-bin"},{"binary_version":"2.13.2-1build2","binary_name":"icinga2-common"},{"binary_name":"icinga2-ido-mysql","binary_version":"2.13.2-1build2"},{"binary_name":"icinga2-ido-pgsql","binary_version":"2.13.2-1build2"},{"binary_name":"vim-icinga2","binary_version":"2.13.2-1build2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.9.0-1","0.9.0-2ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"lnav","binary_version":"0.9.0-2ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.0+1.7.5-2build2","1.11.1+1.9.2+1.7.5-4","1.12.0+1.9.2+1.7.5-3","1.12.0+1.9.2+1.7.5-4"],"ecosystem_specific":{"binaries":[{"binary_name":"php-mongodb","binary_version":"1.12.0+1.9.2+1.7.5-4"},{"binary_name":"php8.1-mongodb","binary_version":"1.12.0+1.9.2+1.7.5-4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.2+dfsg-1","1.7.3+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_name":"r-cran-jsonlite","binary_version":"1.7.3+dfsg-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1-1","1.4.1-1build1","1.4.1-1build2"],"ecosystem_specific":{"binaries":[{"binary_version":"1.4.1-1build2","binary_name":"ruby-yajl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"tulip","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/tulip?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0+dfsg-3","5.4.0+dfsg-3build1","5.4.0+dfsg-3build2"],"ecosystem_specific":{"binaries":[{"binary_version":"5.4.0+dfsg-3build2","binary_name":"libogdf-tulip-5.4-0"},{"binary_name":"libtess2-tulip-5.4","binary_version":"5.4.0+dfsg-3build2"},{"binary_version":"5.4.0+dfsg-3build2","binary_name":"libtulip-core-5.4"},{"binary_name":"libtulip-gui-5.4","binary_version":"5.4.0+dfsg-3build2"},{"binary_name":"libtulip-ogdf-5.4","binary_version":"5.4.0+dfsg-3build2"},{"binary_name":"libtulip-ogl-5.4","binary_version":"5.4.0+dfsg-3build2"},{"binary_version":"5.4.0+dfsg-3build2","binary_name":"libtulip-python-5.4"},{"binary_name":"tulip","binary_version":"5.4.0+dfsg-3build2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"yajl","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/yajl?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-3ubuntu0.22.04.1"}]}],"versions":["2.1.0-3","2.1.0-3build1","2.1.0-3build2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.1.0-3ubuntu0.22.04.1","binary_name":"libyajl2"},{"binary_version":"2.1.0-3ubuntu0.22.04.1","binary_name":"yajl-tools"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.1+repack-1ubuntu2","3.1.0+repack-1","3.1.0+repack-1build2","3.1.0+repack-1build3","3.1.0+repack-1build4"],"ecosystem_specific":{"binaries":[{"binary_name":"argyll","binary_version":"3.1.0+repack-1build4"},{"binary_name":"argyll-ref","binary_version":"3.1.0+repack-1build4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/burp?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-1","3.1.4-3","3.1.4-3ubuntu1","3.1.4-3.1","3.1.4-3.1build1","3.1.4-3.1build2","3.1.4-3.1build3"],"ecosystem_specific":{"binaries":[{"binary_name":"burp","binary_version":"3.1.4-3.1build3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.13.8-1","2.14.1-1","2.14.2-1","2.14.2-1build1","2.14.2-1build2"],"ecosystem_specific":{"binaries":[{"binary_version":"2.14.2-1build2","binary_name":"icinga2"},{"binary_name":"icinga2-bin","binary_version":"2.14.2-1build2"},{"binary_version":"2.14.2-1build2","binary_name":"icinga2-common"},{"binary_version":"2.14.2-1build2","binary_name":"icinga2-ido-mysql"},{"binary_name":"icinga2-ido-pgsql","binary_version":"2.14.2-1build2"},{"binary_version":"2.14.2-1build2","binary_name":"vim-icinga2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.11.2-1","0.11.2-1build2","0.11.2-1build3"],"ecosystem_specific":{"binaries":[{"binary_version":"0.11.2-1build3","binary_name":"lnav"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.0+1.11.1+1.9.2+1.7.5-1build1","1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu1","1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu2","1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu3"],"ecosystem_specific":{"binaries":[{"binary_version":"1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu3","binary_name":"php-mongodb"},{"binary_name":"php8.3-mongodb","binary_version":"1.15.0+1.11.1+1.9.2+1.7.5-1ubuntu3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.5+dfsg-1","1.8.7+dfsg-1","1.8.8+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_version":"1.8.8+dfsg-1","binary_name":"r-cran-jsonlite"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build2","1.4.3-1build3","1.4.3-1build4"],"ecosystem_specific":{"binaries":[{"binary_version":"1.4.3-1build4","binary_name":"ruby-yajl"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0+repack-1.1","3.3.0+repack-1"],"ecosystem_specific":{"binaries":[{"binary_name":"argyll","binary_version":"3.3.0+repack-1"},{"binary_version":"3.3.0+repack-1","binary_name":"argyll-ref"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/burp?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-4"],"ecosystem_specific":{"binaries":[{"binary_name":"burp","binary_version":"3.1.4-4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.5-1","2.14.6-1","2.15.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"icinga2","binary_version":"2.15.0-1"},{"binary_name":"icinga2-bin","binary_version":"2.15.0-1"},{"binary_name":"icinga2-common","binary_version":"2.15.0-1"},{"binary_name":"icinga2-ido-mysql","binary_version":"2.15.0-1"},{"binary_name":"icinga2-ido-pgsql","binary_version":"2.15.0-1"},{"binary_name":"vim-icinga2","binary_version":"2.15.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.12.3-2","0.12.4-1"],"ecosystem_specific":{"binaries":[{"binary_name":"lnav","binary_version":"0.12.4-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.21.0-1","2.0.0-1","2.1.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"php-mongodb","binary_version":"2.1.0-1"},{"binary_name":"php8.4-mongodb","binary_version":"2.1.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1+dfsg-1"],"ecosystem_specific":{"binaries":[{"binary_name":"r-cran-jsonlite","binary_version":"1.9.1+dfsg-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build5"],"ecosystem_specific":{"binaries":[{"binary_name":"ruby-yajl","binary_version":"1.4.3-1build5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"tulip","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/tulip?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libogdf-tulip-6.0","binary_version":"6.0.1+dfsg-2"},{"binary_name":"libtulip-core-6.0","binary_version":"6.0.1+dfsg-2"},{"binary_name":"libtulip-gui-6.0","binary_version":"6.0.1+dfsg-2"},{"binary_version":"6.0.1+dfsg-2","binary_name":"libtulip-ogl-6.0"},{"binary_name":"libtulip-python-6.0","binary_version":"6.0.1+dfsg-2"},{"binary_name":"tulip","binary_version":"6.0.1+dfsg-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"argyll","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/argyll?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.0+repack-1","3.3.0+repack-1.1"],"ecosystem_specific":{"binaries":[{"binary_name":"argyll","binary_version":"3.3.0+repack-1.1"},{"binary_name":"argyll-ref","binary_version":"3.3.0+repack-1.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"burp","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/burp?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.4-4","3.1.4-5"],"ecosystem_specific":{"binaries":[{"binary_name":"burp","binary_version":"3.1.4-5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"icinga2","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/icinga2?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.15.0-1","2.15.1-1"],"ecosystem_specific":{"binaries":[{"binary_name":"icinga2","binary_version":"2.15.1-1"},{"binary_version":"2.15.1-1","binary_name":"icinga2-bin"},{"binary_version":"2.15.1-1","binary_name":"icinga2-common"},{"binary_name":"icinga2-ido-mysql","binary_version":"2.15.1-1"},{"binary_version":"2.15.1-1","binary_name":"icinga2-ido-pgsql"},{"binary_name":"vim-icinga2","binary_version":"2.15.1-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"lnav","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/lnav?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.12.4-1","0.12.4-2","0.13.2-1"],"ecosystem_specific":{"binaries":[{"binary_name":"lnav","binary_version":"0.13.2-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"php-mongodb","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/php-mongodb?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0-1","2.1.7-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"php-mongodb","binary_version":"2.1.7-0ubuntu1"},{"binary_version":"2.1.7-0ubuntu1","binary_name":"php8.5-mongodb"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"r-cran-jsonlite","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/r-cran-jsonlite?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.1+dfsg-1","2.0.0+dfsg-2"],"ecosystem_specific":{"binaries":[{"binary_name":"r-cran-jsonlite","binary_version":"2.0.0+dfsg-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"ruby-yajl","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/ruby-yajl?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.3-1build5"],"ecosystem_specific":{"binaries":[{"binary_name":"ruby-yajl","binary_version":"1.4.3-1build5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}},{"package":{"name":"tulip","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/tulip?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.1+dfsg-2","6.0.1+dfsg-2ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"libogdf-tulip-6.0","binary_version":"6.0.1+dfsg-2ubuntu1"},{"binary_version":"6.0.1+dfsg-2ubuntu1","binary_name":"libtulip-core-6.0"},{"binary_name":"libtulip-gui-6.0","binary_version":"6.0.1+dfsg-2ubuntu1"},{"binary_version":"6.0.1+dfsg-2ubuntu1","binary_name":"libtulip-ogl-6.0"},{"binary_name":"libtulip-python-6.0","binary_version":"6.0.1+dfsg-2ubuntu1"},{"binary_version":"6.0.1+dfsg-2ubuntu1","binary_name":"tulip"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24795.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}