json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
{ "binaries": [ { "binary_name": "libjson-c-dev", "binary_version": "0.11-3ubuntu1.2+esm3" }, { "binary_name": "libjson-c-doc", "binary_version": "0.11-3ubuntu1.2+esm3" }, { "binary_name": "libjson-c2", "binary_version": "0.11-3ubuntu1.2+esm3" }, { "binary_name": "libjson-c2-dbg", "binary_version": "0.11-3ubuntu1.2+esm3" }, { "binary_name": "libjson-c2-dbgsym", "binary_version": "0.11-3ubuntu1.2+esm3" }, { "binary_name": "libjson0", "binary_version": "0.11-3ubuntu1.2+esm3" }, { "binary_name": "libjson0-dev", "binary_version": "0.11-3ubuntu1.2+esm3" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "libjson-c-dev", "binary_version": "0.11-4ubuntu2.6" }, { "binary_name": "libjson-c-doc", "binary_version": "0.11-4ubuntu2.6" }, { "binary_name": "libjson-c2", "binary_version": "0.11-4ubuntu2.6" }, { "binary_name": "libjson-c2-dbg", "binary_version": "0.11-4ubuntu2.6" }, { "binary_name": "libjson-c2-dbgsym", "binary_version": "0.11-4ubuntu2.6" }, { "binary_name": "libjson0", "binary_version": "0.11-4ubuntu2.6" }, { "binary_name": "libjson0-dev", "binary_version": "0.11-4ubuntu2.6" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libjson-c-dev", "binary_version": "0.12.1-1.3ubuntu0.3" }, { "binary_name": "libjson-c-doc", "binary_version": "0.12.1-1.3ubuntu0.3" }, { "binary_name": "libjson-c3", "binary_version": "0.12.1-1.3ubuntu0.3" }, { "binary_name": "libjson-c3-dbgsym", "binary_version": "0.12.1-1.3ubuntu0.3" }, { "binary_name": "libjson-c3-udeb", "binary_version": "0.12.1-1.3ubuntu0.3" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libjson-c-dev", "binary_version": "0.13.1+dfsg-7ubuntu0.3" }, { "binary_name": "libjson-c-doc", "binary_version": "0.13.1+dfsg-7ubuntu0.3" }, { "binary_name": "libjson-c4", "binary_version": "0.13.1+dfsg-7ubuntu0.3" }, { "binary_name": "libjson-c4-dbgsym", "binary_version": "0.13.1+dfsg-7ubuntu0.3" }, { "binary_name": "libjson-c4-udeb", "binary_version": "0.13.1+dfsg-7ubuntu0.3" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }