MediumFix available
argyll, ccextractor and 7 more products — security advisory
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
- Products
- argyll, ccextractor, libgadu, libpg-query, libsignal-protocol-c, ocserv, pidgin, protobuf-c, sudo
- Affected versions
- 0.10.10-1, 0.10.10-1ubuntu1, 0.10.11-1, 0.10.11-1build1, 0.10.7-1, 0.11.6-2, 0.11.9-1, 0.11.9-1build1, 0.12.2-3build1, 0.12.2-3build2, 0.12.5-1, 0.12.6-1, 0.14-1ubuntu1, 0.15-1, 0.15-1build1, 0.87+ds1-1, 0.88+ds1-1, 0.93+ds2-1, 0.93+ds2-1ubuntu1, 0.93+ds2-2, 0.94+ds1-3, 0.94+ds1-3build2, 0.94+ds1-3build3, 1.0.2-1build2, 1.1.1-1, 1.1.2-2, 1.1.3-1, 1.2.0-1, 1.2.1-1, 1.2.1-2, 1.2.2-1, 1.2.4-1, 1.2.4-1build1, 1.2.4-1build2, 1.3.0-1, 1.3.0-2, 1.3.0-3, 1.3.1-1build1, 1.3.2-1, 1.3.3-1, 1.3.3-1build2, 1.3.3-1ubuntu1, 1.3.3-1ubuntu2, 1.4.1-1, 1.5.0-1, 1.5.0-1build1, 1.7.0+repack-4, 1.8.2+repack-1, 1.8.3+repack-1, 1.8.3+repack-2, 1.9.2+repack-1, 1.9.2+repack-2, 1.9.5p2-3ubuntu2, 1.9.9-1ubuntu2, 1.9.9-1ubuntu2.1, 13-2.1.0-1, 13-2.1.0-2, 15-4.2.3-1, 15-4.2.3-2, 16-5.1.0-2, 17-6.0.0-1, 17-6.1.0-1, 17-6.2.0-1, 17-6.2.0-2, 17-6.2.1-1, 17-6.2.2-1, 18.0.0-3, 1:1.12.1-2, 1:1.12.1-2build1, 1:1.12.2-2, 1:1.12.2-3, 1:1.12.2-4, 1:1.12.2-5, 1:1.12.2-6, 1:1.12.2-6.1, 1:1.12.2-6.1build1, 1:1.12.2-6.1build2, 1:1.12.2-6.1build3, 1:1.12.2-7, 1:1.12.2-8, 1:2.10.11-0ubuntu4, 1:2.10.11-0ubuntu5, 1:2.10.12-0ubuntu1, 1:2.10.12-0ubuntu2, 1:2.10.12-0ubuntu3, 1:2.10.12-0ubuntu4, 1:2.10.12-0ubuntu5, 1:2.10.12-0ubuntu5.1, 1:2.10.12-0ubuntu5.2, 1:2.10.7-0ubuntu4.1, 1:2.10.7-0ubuntu4.2, 1:2.10.9-0ubuntu1, 1:2.10.9-0ubuntu2, 1:2.10.9-0ubuntu3, 1:2.10.9-0ubuntu3.1, 1:2.10.9-0ubuntu3.2, 1:2.10.9-0ubuntu3.3, 1:2.10.9-0ubuntu3.4, 1:2.12.0-1ubuntu2, 1:2.12.0-1ubuntu4, 1:2.13.0-2.2ubuntu1, 1:2.13.0-2.2ubuntu2, 1:2.13.0-2.2ubuntu3, 1:2.13.0-2.2ubuntu4, 1:2.14.1-1ubuntu1, 1:2.14.12-1ubuntu1, 1:2.14.12-1ubuntu2, 1:2.14.13-1ubuntu1, 1:2.14.13-1ubuntu2, 1:2.14.14-1ubuntu1, 1:2.14.14-1ubuntu2, 1:2.14.14-1ubuntu3, 1:2.14.14-1ubuntu4, 1:2.14.8-1ubuntu1, 1:2.14.8-1ubuntu2, 1:2.14.8-1ubuntu2.1, 2.0.0+repack-1build1, 2.0.1+repack-1, 2.0.1+repack-2, 2.2.0+repack-1, 2.2.0+repack-1build1, 2.3.1+git20171007-2, 2.3.1+git20171007-3, 2.3.1+repack-1ubuntu2, 2.3.2-2, 2.3.3-1, 2.3.3-3, 2.3.3-6, 2.3.3-6.1, 3.1.0+repack-1, 3.1.0+repack-1.1, 3.1.0+repack-1build2, 3.1.0+repack-1build3, 3.1.0+repack-1build4, 3.3.0+repack-1, 3.3.0+repack-1.1, 3.5.0+repack-1, 3.5.0+repack-1build1
- Fixed versions
- 1.3.3-1ubuntu0.1, 1.3.3-1ubuntu2.1, 1.9.9-1ubuntu2.2
- CVEs
- CVE-2022-33070
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:38 UTC · Revision 1
Source evidence
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
osv:UBUNTU-CVE-2022-33070
pidgin
Fixed versions: Not specified
protobuf-c
Fixed versions: Not specified
argyll
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
protobuf-c
Fixed versions: Not specified
argyll
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
protobuf-c
Fixed versions: Not specified
protobuf-c
Fixed versions: 1.3.3-1ubuntu0.1
argyll
Fixed versions: Not specified
ccextractor
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
argyll
Fixed versions: Not specified
ccextractor
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libpg-query
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
protobuf-c
Fixed versions: 1.3.3-1ubuntu2.1
sudo
Fixed versions: 1.9.9-1ubuntu2.2
argyll
Fixed versions: Not specified
ccextractor
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libpg-query
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
argyll
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libpg-query
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
argyll
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libpg-query
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
argyll
Fixed versions: Not specified
libgadu
Fixed versions: Not specified
libpg-query
Fixed versions: Not specified
libsignal-protocol-c
Fixed versions: Not specified
ocserv
Fixed versions: Not specified
pidgin
Fixed versions: Not specified
Complete source record
{
"id": "e222981111019ec90adcc802d60f1f41a5d71fad7f358c4a4f2884668afd345d",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-33070",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-33070",
"summary": "Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.",
"evidence": "osv:UBUNTU-CVE-2022-33070",
"products": [
{
"name": {
"value": "pidgin",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.10.7-0ubuntu4.1",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.7-0ubuntu4.2",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu3",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu3.1",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu3.2",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu3.3",
"evidence": "/affected/0/versions"
},
{
"value": "1:2.10.9-0ubuntu3.4",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "protobuf-c",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.14-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "0.15-1",
"evidence": "/affected/1/versions"
},
{
"value": "0.15-1build1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.7.0+repack-4",
"evidence": "/affected/2/versions"
},
{
"value": "1.8.2+repack-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.8.3+repack-1",
"evidence": "/affected/2/versions"
},
{
"value": "1.8.3+repack-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.1-2",
"evidence": "/affected/3/versions"
},
{
"value": "1:1.12.1-2build1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.7-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.10.10-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.10.10-1ubuntu1",
"evidence": "/affected/4/versions"
},
{
"value": "0.10.11-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.10.11-1build1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.10.11-0ubuntu4",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.11-0ubuntu5",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu1",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu2",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu3",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu4",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu5",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu5.1",
"evidence": "/affected/5/versions"
},
{
"value": "1:2.10.12-0ubuntu5.2",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "protobuf-c",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.0.2-1build2",
"evidence": "/affected/6/versions"
},
{
"value": "1.1.1-1",
"evidence": "/affected/6/versions"
},
{
"value": "1.2.1-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.9.2+repack-1",
"evidence": "/affected/7/versions"
},
{
"value": "1.9.2+repack-2",
"evidence": "/affected/7/versions"
},
{
"value": "2.0.0+repack-1build1",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-2",
"evidence": "/affected/8/versions"
},
{
"value": "1:1.12.2-3",
"evidence": "/affected/8/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.1+git20171007-2",
"evidence": "/affected/9/versions"
},
{
"value": "2.3.1+git20171007-3",
"evidence": "/affected/9/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.11.6-2",
"evidence": "/affected/10/versions"
},
{
"value": "0.11.9-1",
"evidence": "/affected/10/versions"
},
{
"value": "0.11.9-1build1",
"evidence": "/affected/10/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.12.0-1ubuntu2",
"evidence": "/affected/11/versions"
},
{
"value": "1:2.12.0-1ubuntu4",
"evidence": "/affected/11/versions"
}
]
},
{
"name": {
"value": "protobuf-c",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.2.1-2",
"evidence": "/affected/12/versions"
}
]
},
{
"name": {
"value": "protobuf-c",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.3-1ubuntu0.1",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": [
{
"value": "1.3.1-1build1",
"evidence": "/affected/13/versions"
},
{
"value": "1.3.2-1",
"evidence": "/affected/13/versions"
},
{
"value": "1.3.3-1",
"evidence": "/affected/13/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+repack-1",
"evidence": "/affected/14/versions"
}
]
},
{
"name": {
"value": "ccextractor",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.87+ds1-1",
"evidence": "/affected/15/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-3",
"evidence": "/affected/16/versions"
},
{
"value": "1:1.12.2-4",
"evidence": "/affected/16/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.2-2",
"evidence": "/affected/17/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.12.2-3build1",
"evidence": "/affected/18/versions"
},
{
"value": "0.12.2-3build2",
"evidence": "/affected/18/versions"
},
{
"value": "0.12.5-1",
"evidence": "/affected/18/versions"
},
{
"value": "0.12.6-1",
"evidence": "/affected/18/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.13.0-2.2ubuntu1",
"evidence": "/affected/19/versions"
},
{
"value": "1:2.13.0-2.2ubuntu2",
"evidence": "/affected/19/versions"
},
{
"value": "1:2.13.0-2.2ubuntu3",
"evidence": "/affected/19/versions"
},
{
"value": "1:2.13.0-2.2ubuntu4",
"evidence": "/affected/19/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.0.1+repack-2",
"evidence": "/affected/20/versions"
},
{
"value": "2.2.0+repack-1",
"evidence": "/affected/20/versions"
},
{
"value": "2.2.0+repack-1build1",
"evidence": "/affected/20/versions"
}
]
},
{
"name": {
"value": "ccextractor",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.88+ds1-1",
"evidence": "/affected/21/versions"
},
{
"value": "0.93+ds2-1",
"evidence": "/affected/21/versions"
},
{
"value": "0.93+ds2-1ubuntu1",
"evidence": "/affected/21/versions"
},
{
"value": "0.93+ds2-2",
"evidence": "/affected/21/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-5",
"evidence": "/affected/22/versions"
},
{
"value": "1:1.12.2-6",
"evidence": "/affected/22/versions"
}
]
},
{
"name": {
"value": "libpg-query",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "13-2.1.0-1",
"evidence": "/affected/23/versions"
},
{
"value": "13-2.1.0-2",
"evidence": "/affected/23/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.3-1",
"evidence": "/affected/24/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.1.2-2",
"evidence": "/affected/25/versions"
},
{
"value": "1.1.3-1",
"evidence": "/affected/25/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.14.1-1ubuntu1",
"evidence": "/affected/26/versions"
},
{
"value": "1:2.14.8-1ubuntu1",
"evidence": "/affected/26/versions"
},
{
"value": "1:2.14.8-1ubuntu2",
"evidence": "/affected/26/versions"
},
{
"value": "1:2.14.8-1ubuntu2.1",
"evidence": "/affected/26/versions"
}
]
},
{
"name": {
"value": "protobuf-c",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.3.3-1ubuntu2.1",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": [
{
"value": "1.3.3-1build2",
"evidence": "/affected/27/versions"
},
{
"value": "1.3.3-1ubuntu1",
"evidence": "/affected/27/versions"
},
{
"value": "1.3.3-1ubuntu2",
"evidence": "/affected/27/versions"
}
]
},
{
"name": {
"value": "sudo",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.9.9-1ubuntu2.2",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": [
{
"value": "1.9.5p2-3ubuntu2",
"evidence": "/affected/28/versions"
},
{
"value": "1.9.9-1ubuntu2",
"evidence": "/affected/28/versions"
},
{
"value": "1.9.9-1ubuntu2.1",
"evidence": "/affected/28/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.1+repack-1ubuntu2",
"evidence": "/affected/29/versions"
},
{
"value": "3.1.0+repack-1",
"evidence": "/affected/29/versions"
},
{
"value": "3.1.0+repack-1build2",
"evidence": "/affected/29/versions"
},
{
"value": "3.1.0+repack-1build3",
"evidence": "/affected/29/versions"
},
{
"value": "3.1.0+repack-1build4",
"evidence": "/affected/29/versions"
}
]
},
{
"name": {
"value": "ccextractor",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.94+ds1-3",
"evidence": "/affected/30/versions"
},
{
"value": "0.94+ds1-3build2",
"evidence": "/affected/30/versions"
},
{
"value": "0.94+ds1-3build3",
"evidence": "/affected/30/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-6",
"evidence": "/affected/31/versions"
},
{
"value": "1:1.12.2-6.1",
"evidence": "/affected/31/versions"
},
{
"value": "1:1.12.2-6.1build1",
"evidence": "/affected/31/versions"
},
{
"value": "1:1.12.2-6.1build2",
"evidence": "/affected/31/versions"
}
]
},
{
"name": {
"value": "libpg-query",
"evidence": "/affected/32/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "15-4.2.3-1",
"evidence": "/affected/32/versions"
},
{
"value": "15-4.2.3-2",
"evidence": "/affected/32/versions"
},
{
"value": "16-5.1.0-2",
"evidence": "/affected/32/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/33/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.3-3",
"evidence": "/affected/33/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/34/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.2.0-1",
"evidence": "/affected/34/versions"
},
{
"value": "1.2.1-1",
"evidence": "/affected/34/versions"
},
{
"value": "1.2.2-1",
"evidence": "/affected/34/versions"
},
{
"value": "1.2.4-1",
"evidence": "/affected/34/versions"
},
{
"value": "1.2.4-1build1",
"evidence": "/affected/34/versions"
},
{
"value": "1.2.4-1build2",
"evidence": "/affected/34/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/35/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.14.12-1ubuntu1",
"evidence": "/affected/35/versions"
},
{
"value": "1:2.14.12-1ubuntu2",
"evidence": "/affected/35/versions"
},
{
"value": "1:2.14.13-1ubuntu1",
"evidence": "/affected/35/versions"
},
{
"value": "1:2.14.13-1ubuntu2",
"evidence": "/affected/35/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/36/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.0+repack-1.1",
"evidence": "/affected/36/versions"
},
{
"value": "3.3.0+repack-1",
"evidence": "/affected/36/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/37/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-6.1build2",
"evidence": "/affected/37/versions"
},
{
"value": "1:1.12.2-6.1build3",
"evidence": "/affected/37/versions"
}
]
},
{
"name": {
"value": "libpg-query",
"evidence": "/affected/38/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "17-6.0.0-1",
"evidence": "/affected/38/versions"
},
{
"value": "17-6.1.0-1",
"evidence": "/affected/38/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/39/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.3-6",
"evidence": "/affected/39/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/40/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.3.0-1",
"evidence": "/affected/40/versions"
},
{
"value": "1.3.0-2",
"evidence": "/affected/40/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/41/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.14.14-1ubuntu1",
"evidence": "/affected/41/versions"
},
{
"value": "1:2.14.14-1ubuntu2",
"evidence": "/affected/41/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/42/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.3.0+repack-1.1",
"evidence": "/affected/42/versions"
},
{
"value": "3.5.0+repack-1",
"evidence": "/affected/42/versions"
},
{
"value": "3.5.0+repack-1build1",
"evidence": "/affected/42/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/43/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-7",
"evidence": "/affected/43/versions"
},
{
"value": "1:1.12.2-8",
"evidence": "/affected/43/versions"
}
]
},
{
"name": {
"value": "libpg-query",
"evidence": "/affected/44/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "17-6.2.2-1",
"evidence": "/affected/44/versions"
},
{
"value": "18.0.0-3",
"evidence": "/affected/44/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/45/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.3-6.1",
"evidence": "/affected/45/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/46/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.3.0-3",
"evidence": "/affected/46/versions"
},
{
"value": "1.4.1-1",
"evidence": "/affected/46/versions"
},
{
"value": "1.5.0-1",
"evidence": "/affected/46/versions"
},
{
"value": "1.5.0-1build1",
"evidence": "/affected/46/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/47/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.14.14-1ubuntu3",
"evidence": "/affected/47/versions"
},
{
"value": "1:2.14.14-1ubuntu4",
"evidence": "/affected/47/versions"
}
]
},
{
"name": {
"value": "argyll",
"evidence": "/affected/48/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.3.0+repack-1",
"evidence": "/affected/48/versions"
},
{
"value": "3.3.0+repack-1.1",
"evidence": "/affected/48/versions"
}
]
},
{
"name": {
"value": "libgadu",
"evidence": "/affected/49/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:1.12.2-6.1build3",
"evidence": "/affected/49/versions"
},
{
"value": "1:1.12.2-7",
"evidence": "/affected/49/versions"
}
]
},
{
"name": {
"value": "libpg-query",
"evidence": "/affected/50/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "17-6.1.0-1",
"evidence": "/affected/50/versions"
},
{
"value": "17-6.2.0-1",
"evidence": "/affected/50/versions"
},
{
"value": "17-6.2.0-2",
"evidence": "/affected/50/versions"
},
{
"value": "17-6.2.1-1",
"evidence": "/affected/50/versions"
},
{
"value": "17-6.2.2-1",
"evidence": "/affected/50/versions"
}
]
},
{
"name": {
"value": "libsignal-protocol-c",
"evidence": "/affected/51/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.3-6",
"evidence": "/affected/51/versions"
},
{
"value": "2.3.3-6.1",
"evidence": "/affected/51/versions"
}
]
},
{
"name": {
"value": "ocserv",
"evidence": "/affected/52/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.3.0-2",
"evidence": "/affected/52/versions"
},
{
"value": "1.3.0-3",
"evidence": "/affected/52/versions"
}
]
},
{
"name": {
"value": "pidgin",
"evidence": "/affected/53/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1:2.14.14-1ubuntu2",
"evidence": "/affected/53/versions"
},
{
"value": "1:2.14.14-1ubuntu3",
"evidence": "/affected/53/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2022-33070",
"aliases": [
"UBUNTU-CVE-2022-33070"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=trusty",
"ecosystem": "Ubuntu:14.04:LTS"
},
"versions": [
"1:2.10.7-0ubuntu4.1",
"1:2.10.7-0ubuntu4.2",
"1:2.10.9-0ubuntu1",
"1:2.10.9-0ubuntu2",
"1:2.10.9-0ubuntu3",
"1:2.10.9-0ubuntu3.1",
"1:2.10.9-0ubuntu3.2",
"1:2.10.9-0ubuntu3.3",
"1:2.10.9-0ubuntu3.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.10.9-0ubuntu3.4"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.10.9-0ubuntu3.4"
},
{
"binary_name": "libpurple0",
"binary_version": "1:2.10.9-0ubuntu3.4"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.10.9-0ubuntu3.4"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.10.9-0ubuntu3.4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "protobuf-c",
"purl": "pkg:deb/ubuntu/protobuf-c?arch=source&distro=trusty",
"ecosystem": "Ubuntu:14.04:LTS"
},
"versions": [
"0.14-1ubuntu1",
"0.15-1",
"0.15-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libprotobuf-c0",
"binary_version": "0.15-1build1"
},
{
"binary_name": "protobuf-c-compiler",
"binary_version": "0.15-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.7.0+repack-4",
"1.8.2+repack-1",
"1.8.3+repack-1",
"1.8.3+repack-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "1.8.3+repack-2"
},
{
"binary_name": "argyll-ref",
"binary_version": "1.8.3+repack-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1:1.12.1-2",
"1:1.12.1-2build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3",
"binary_version": "1:1.12.1-2build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"0.10.7-1",
"0.10.10-1",
"0.10.10-1ubuntu1",
"0.10.11-1",
"0.10.11-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "0.10.11-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1:2.10.11-0ubuntu4",
"1:2.10.11-0ubuntu5",
"1:2.10.12-0ubuntu1",
"1:2.10.12-0ubuntu2",
"1:2.10.12-0ubuntu3",
"1:2.10.12-0ubuntu4",
"1:2.10.12-0ubuntu5",
"1:2.10.12-0ubuntu5.1",
"1:2.10.12-0ubuntu5.2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.10.12-0ubuntu5.2"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.10.12-0ubuntu5.2"
},
{
"binary_name": "libpurple0",
"binary_version": "1:2.10.12-0ubuntu5.2"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.10.12-0ubuntu5.2"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.10.12-0ubuntu5.2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "protobuf-c",
"purl": "pkg:deb/ubuntu/protobuf-c?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"1.0.2-1build2",
"1.1.1-1",
"1.2.1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libprotobuf-c1",
"binary_version": "1.2.1-1"
},
{
"binary_name": "protobuf-c-compiler",
"binary_version": "1.2.1-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.9.2+repack-1",
"1.9.2+repack-2",
"2.0.0+repack-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "2.0.0+repack-1build1"
},
{
"binary_name": "argyll-ref",
"binary_version": "2.0.0+repack-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1:1.12.2-2",
"1:1.12.2-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3",
"binary_version": "1:1.12.2-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"2.3.1+git20171007-2",
"2.3.1+git20171007-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2",
"binary_version": "2.3.1+git20171007-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"0.11.6-2",
"0.11.9-1",
"0.11.9-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "0.11.9-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1:2.12.0-1ubuntu2",
"1:2.12.0-1ubuntu4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.12.0-1ubuntu4"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.12.0-1ubuntu4"
},
{
"binary_name": "libpurple0",
"binary_version": "1:2.12.0-1ubuntu4"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.12.0-1ubuntu4"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.12.0-1ubuntu4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "protobuf-c",
"purl": "pkg:deb/ubuntu/protobuf-c?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.2.1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libprotobuf-c1",
"binary_version": "1.2.1-2"
},
{
"binary_name": "protobuf-c-compiler",
"binary_version": "1.2.1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.3-1ubuntu0.1"
}
]
}
],
"package": {
"name": "protobuf-c",
"purl": "pkg:deb/ubuntu/protobuf-c?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.3.1-1build1",
"1.3.2-1",
"1.3.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libprotobuf-c1",
"binary_version": "1.3.3-1ubuntu0.1"
},
{
"binary_name": "protobuf-c-compiler",
"binary_version": "1.3.3-1ubuntu0.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"2.0.1+repack-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "2.0.1+repack-1"
},
{
"binary_name": "argyll-ref",
"binary_version": "2.0.1+repack-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ccextractor",
"purl": "pkg:deb/ubuntu/ccextractor?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"0.87+ds1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ccextractor",
"binary_version": "0.87+ds1-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1:1.12.2-3",
"1:1.12.2-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3",
"binary_version": "1:1.12.2-4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"2.3.2-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2.3.2",
"binary_version": "2.3.2-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"0.12.2-3build1",
"0.12.2-3build2",
"0.12.5-1",
"0.12.6-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "0.12.6-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1:2.13.0-2.2ubuntu1",
"1:2.13.0-2.2ubuntu2",
"1:2.13.0-2.2ubuntu3",
"1:2.13.0-2.2ubuntu4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.13.0-2.2ubuntu4"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.13.0-2.2ubuntu4"
},
{
"binary_name": "libpurple0",
"binary_version": "1:2.13.0-2.2ubuntu4"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.13.0-2.2ubuntu4"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.13.0-2.2ubuntu4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.0.1+repack-2",
"2.2.0+repack-1",
"2.2.0+repack-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "2.2.0+repack-1build1"
},
{
"binary_name": "argyll-ref",
"binary_version": "2.2.0+repack-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ccextractor",
"purl": "pkg:deb/ubuntu/ccextractor?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"0.88+ds1-1",
"0.93+ds2-1",
"0.93+ds2-1ubuntu1",
"0.93+ds2-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ccextractor",
"binary_version": "0.93+ds2-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1:1.12.2-5",
"1:1.12.2-6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3",
"binary_version": "1:1.12.2-6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libpg-query",
"purl": "pkg:deb/ubuntu/libpg-query?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"13-2.1.0-1",
"13-2.1.0-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpg-query1302.1",
"binary_version": "13-2.1.0-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2.3.2",
"binary_version": "2.3.3-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.1.2-2",
"1.1.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "1.1.3-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1:2.14.1-1ubuntu1",
"1:2.14.8-1ubuntu1",
"1:2.14.8-1ubuntu2",
"1:2.14.8-1ubuntu2.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.14.8-1ubuntu2.1"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.14.8-1ubuntu2.1"
},
{
"binary_name": "libpurple0",
"binary_version": "1:2.14.8-1ubuntu2.1"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.14.8-1ubuntu2.1"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.14.8-1ubuntu2.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.3-1ubuntu2.1"
}
]
}
],
"package": {
"name": "protobuf-c",
"purl": "pkg:deb/ubuntu/protobuf-c?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.3.3-1build2",
"1.3.3-1ubuntu1",
"1.3.3-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libprotobuf-c1",
"binary_version": "1.3.3-1ubuntu2.1"
},
{
"binary_name": "protobuf-c-compiler",
"binary_version": "1.3.3-1ubuntu2.1"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.9.9-1ubuntu2.2"
}
]
}
],
"package": {
"name": "sudo",
"purl": "pkg:deb/ubuntu/sudo?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.9.5p2-3ubuntu2",
"1.9.9-1ubuntu2",
"1.9.9-1ubuntu2.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "sudo",
"binary_version": "1.9.9-1ubuntu2.2"
},
{
"binary_name": "sudo-ldap",
"binary_version": "1.9.9-1ubuntu2.2"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.3.1+repack-1ubuntu2",
"3.1.0+repack-1",
"3.1.0+repack-1build2",
"3.1.0+repack-1build3",
"3.1.0+repack-1build4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "3.1.0+repack-1build4"
},
{
"binary_name": "argyll-ref",
"binary_version": "3.1.0+repack-1build4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ccextractor",
"purl": "pkg:deb/ubuntu/ccextractor?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"0.94+ds1-3",
"0.94+ds1-3build2",
"0.94+ds1-3build3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ccextractor",
"binary_version": "0.94+ds1-3build3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1:1.12.2-6",
"1:1.12.2-6.1",
"1:1.12.2-6.1build1",
"1:1.12.2-6.1build2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3t64",
"binary_version": "1:1.12.2-6.1build2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libpg-query",
"purl": "pkg:deb/ubuntu/libpg-query?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"15-4.2.3-1",
"15-4.2.3-2",
"16-5.1.0-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpg-query1605.1",
"binary_version": "16-5.1.0-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.3.3-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2.3.2",
"binary_version": "2.3.3-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1.2.0-1",
"1.2.1-1",
"1.2.2-1",
"1.2.4-1",
"1.2.4-1build1",
"1.2.4-1build2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "1.2.4-1build2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1:2.14.12-1ubuntu1",
"1:2.14.12-1ubuntu2",
"1:2.14.13-1ubuntu1",
"1:2.14.13-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.14.13-1ubuntu2"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.14.13-1ubuntu2"
},
{
"binary_name": "libpurple0t64",
"binary_version": "1:2.14.13-1ubuntu2"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.14.13-1ubuntu2"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.14.13-1ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"3.1.0+repack-1.1",
"3.3.0+repack-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "3.3.0+repack-1"
},
{
"binary_name": "argyll-ref",
"binary_version": "3.3.0+repack-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1:1.12.2-6.1build2",
"1:1.12.2-6.1build3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3t64",
"binary_version": "1:1.12.2-6.1build3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libpg-query",
"purl": "pkg:deb/ubuntu/libpg-query?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"17-6.0.0-1",
"17-6.1.0-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpg-query1706.0",
"binary_version": "17-6.1.0-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.3.3-6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2.3.2",
"binary_version": "2.3.3-6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1.3.0-1",
"1.3.0-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "1.3.0-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"1:2.14.14-1ubuntu1",
"1:2.14.14-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.14.14-1ubuntu2"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.14.14-1ubuntu2"
},
{
"binary_name": "libpurple0t64",
"binary_version": "1:2.14.14-1ubuntu2"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.14.14-1ubuntu2"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.14.14-1ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"3.3.0+repack-1.1",
"3.5.0+repack-1",
"3.5.0+repack-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "3.5.0+repack-1build1"
},
{
"binary_name": "argyll-ref",
"binary_version": "3.5.0+repack-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1:1.12.2-7",
"1:1.12.2-8"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3t64",
"binary_version": "1:1.12.2-8"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libpg-query",
"purl": "pkg:deb/ubuntu/libpg-query?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"17-6.2.2-1",
"18.0.0-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpg-query1818.0",
"binary_version": "18.0.0-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.3.3-6.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2.3.2",
"binary_version": "2.3.3-6.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1.3.0-3",
"1.4.1-1",
"1.5.0-1",
"1.5.0-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "1.5.0-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"1:2.14.14-1ubuntu3",
"1:2.14.14-1ubuntu4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.14.14-1ubuntu4"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.14.14-1ubuntu4"
},
{
"binary_name": "libpurple0t64",
"binary_version": "1:2.14.14-1ubuntu4"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.14.14-1ubuntu4"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.14.14-1ubuntu4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "argyll",
"purl": "pkg:deb/ubuntu/argyll?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.3.0+repack-1",
"3.3.0+repack-1.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "argyll",
"binary_version": "3.3.0+repack-1.1"
},
{
"binary_name": "argyll-ref",
"binary_version": "3.3.0+repack-1.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libgadu",
"purl": "pkg:deb/ubuntu/libgadu?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1:1.12.2-6.1build3",
"1:1.12.2-7"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libgadu3t64",
"binary_version": "1:1.12.2-7"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libpg-query",
"purl": "pkg:deb/ubuntu/libpg-query?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"17-6.1.0-1",
"17-6.2.0-1",
"17-6.2.0-2",
"17-6.2.1-1",
"17-6.2.2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libpg-query1706.0",
"binary_version": "17-6.2.2-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsignal-protocol-c",
"purl": "pkg:deb/ubuntu/libsignal-protocol-c?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.3.3-6",
"2.3.3-6.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsignal-protocol-c2.3.2",
"binary_version": "2.3.3-6.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ocserv",
"purl": "pkg:deb/ubuntu/ocserv?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1.3.0-2",
"1.3.0-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ocserv",
"binary_version": "1.3.0-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pidgin",
"purl": "pkg:deb/ubuntu/pidgin?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"1:2.14.14-1ubuntu2",
"1:2.14.14-1ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-33070.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "finch",
"binary_version": "1:2.14.14-1ubuntu3"
},
{
"binary_name": "libpurple-bin",
"binary_version": "1:2.14.14-1ubuntu3"
},
{
"binary_name": "libpurple0t64",
"binary_version": "1:2.14.14-1ubuntu3"
},
{
"binary_name": "pidgin",
"binary_version": "1:2.14.14-1ubuntu3"
},
{
"binary_name": "pidgin-data",
"binary_version": "1:2.14.14-1ubuntu3"
}
]
}
}
],
"modified": "2026-10-17T12:57:14.667444053Z",
"provider": "osv",
"upstream": [
"CVE-2022-33070"
],
"references": [
"https://ubuntu.com/security/CVE-2022-33070",
"https://github.com/protobuf-c/protobuf-c/pull/508",
"https://ubuntu.com/security/notices/USN-5531-1",
"https://ubuntu.com/security/notices/USN-5811-1",
"https://www.cve.org/CVERecord?id=CVE-2022-33070"
]
},
"related_cves": [
{
"value": "CVE-2022-33070",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 357005,
"published_at": "2022-06-23T17:15:00+00:00"
}