ubuntu-cve-2024-31852
Vulnerability from osv_ubuntu
Published
2024-04-05 15:15
Modified
2026-04-22 07:48
Summary
Details

LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is "we don't have strong objections for a CVE to be created ... It does seem that the likelihood of this miscompile enabling an exploit remains very low, because the miscompile resulting in this JOP gadget is such that the function is most likely to crash on most valid inputs to the function. So, if this function is covered by any testing, the miscompile is most likely to be discovered before the binary is shipped to production."

Severity

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "clang-3.6-examples",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "clang-format-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "clang-modernize-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "cpp11-migrate-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "libclang1-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "liblldb-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "libllvm3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "lldb-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "llvm-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "llvm-3.6-examples",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "llvm-3.6-runtime",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "llvm-3.6-tools",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "python-clang-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          },
          {
            "binary_name": "python-lldb-3.6",
            "binary_version": "1:3.6-2ubuntu1~trusty2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "llvm-toolchain-3.6",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.6@1:3.6-2ubuntu1~trusty2?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.6-2ubuntu1~trusty1",
        "1:3.6-2ubuntu1~trusty2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "clang-3.8-examples",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "clang-format-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "clang-tidy-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "libclang1-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "liblldb-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "libllvm3.8v4",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "lldb-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "llvm-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "llvm-3.8-examples",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "llvm-3.8-runtime",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "python-clang-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          },
          {
            "binary_name": "python-lldb-3.8",
            "binary_version": "1:3.8-2ubuntu3~trusty5"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "llvm-toolchain-3.8",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.8@1:3.8-2ubuntu3~trusty5?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.8-2ubuntu3~trusty4",
        "1:3.8-2ubuntu3~trusty5"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "clang-3.9-examples",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "clang-format-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "clang-tidy-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "libclang1-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "liblldb-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "libllvm3.9v4",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "lldb-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "llvm-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "llvm-3.9-examples",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "llvm-3.9-runtime",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "llvm-3.9-tools",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "python-clang-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          },
          {
            "binary_name": "python-lldb-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~14.04.3"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "llvm-toolchain-3.9",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.9@1:3.9.1-4ubuntu3~14.04.3?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.9.1-4ubuntu3~14.04.2",
        "1:3.9.1-4ubuntu3~14.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "clang-3.6-examples",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "clang-format-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "clang-modernize-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "clang-tidy-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "cpp11-migrate-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "libclang1-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "liblldb-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "libllvm3.6v5",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "lldb-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "llvm-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "llvm-3.6-examples",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "llvm-3.6-runtime",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "llvm-3.6-tools",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "python-clang-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          },
          {
            "binary_name": "python-lldb-3.6",
            "binary_version": "1:3.6.2-3ubuntu2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-3.6",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.6@1:3.6.2-3ubuntu2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.6.2-1",
        "1:3.6.2-3",
        "1:3.6.2-3build1",
        "1:3.6.2-3ubuntu1",
        "1:3.6.2-3ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "clang-3.8-examples",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "clang-format-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "clang-tidy-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "libclang1-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "liblldb-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "libllvm3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "lldb-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "llvm-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "llvm-3.8-examples",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "llvm-3.8-runtime",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "python-clang-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          },
          {
            "binary_name": "python-lldb-3.8",
            "binary_version": "1:3.8-2ubuntu4"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-3.8",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.8@1:3.8-2ubuntu4?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.8~+rc1-1~exp1ubuntu3",
        "1:3.8~+rc2-1~exp1ubuntu2",
        "1:3.8-2ubuntu1",
        "1:3.8-2ubuntu3",
        "1:3.8-2ubuntu4"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "clang-4.0-examples",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "clang-format-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "clang-tidy-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "libclang1-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "liblld-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "liblldb-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "libllvm4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "lld-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "lldb-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "llvm-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "llvm-4.0-examples",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "llvm-4.0-runtime",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "llvm-4.0-tools",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "python-clang-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          },
          {
            "binary_name": "python-lldb-4.0",
            "binary_version": "1:4.0-1ubuntu1~16.04.2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-4.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-4.0@1:4.0-1ubuntu1~16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:4.0-1ubuntu1~16.04.1",
        "1:4.0-1ubuntu1~16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "clang-5.0-examples",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "clang-format-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "clang-tidy-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "libclang1-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "liblld-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "liblldb-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "libllvm5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "lld-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "lldb-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "llvm-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "llvm-5.0-examples",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "llvm-5.0-runtime",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "llvm-5.0-tools",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "python-clang-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          },
          {
            "binary_name": "python-lldb-5.0",
            "binary_version": "1:5.0-3~16.04.1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-5.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-5.0@1:5.0-3~16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:5.0-3~16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "clang-6.0-examples",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "clang-format-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "clang-tidy-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "clang-tools-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "libclang1-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "liblld-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "liblldb-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "libllvm6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "lld-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "lldb-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "llvm-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "llvm-6.0-examples",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "llvm-6.0-runtime",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "llvm-6.0-tools",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "python-clang-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          },
          {
            "binary_name": "python-lldb-6.0",
            "binary_version": "1:6.0-1ubuntu2~16.04.1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-6.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-6.0@1:6.0-1ubuntu2~16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.0-1ubuntu2~16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "clang-3.5-examples",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "clang-format-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "clang-modernize-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "cpp11-migrate-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "libclang1-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "liblldb-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "libllvm3.5v5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "lldb-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "llvm-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "llvm-3.5-examples",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "llvm-3.5-runtime",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "llvm-3.5-tools",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "python-clang-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          },
          {
            "binary_name": "python-lldb-3.5",
            "binary_version": "1:3.5.2-3ubuntu1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-3.5",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.5@1:3.5.2-3ubuntu1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.5.2-2",
        "1:3.5.2-3",
        "1:3.5.2-3build1",
        "1:3.5.2-3build2",
        "1:3.5.2-3ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "clang-3.7-examples",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "clang-format-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "clang-modernize-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "clang-tidy-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "cpp11-migrate-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "libclang1-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "liblldb-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "libllvm3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "lldb-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "llvm-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "llvm-3.7-examples",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "llvm-3.7-runtime",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "llvm-3.7-tools",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "python-clang-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          },
          {
            "binary_name": "python-lldb-3.7",
            "binary_version": "1:3.7.1-2ubuntu2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-3.7",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.7@1:3.7.1-2ubuntu2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.7-2ubuntu1",
        "1:3.7-2ubuntu2",
        "1:3.7-4ubuntu1",
        "1:3.7.1-1ubuntu1",
        "1:3.7.1-1ubuntu2",
        "1:3.7.1-1ubuntu3",
        "1:3.7.1-1ubuntu4",
        "1:3.7.1-2ubuntu1",
        "1:3.7.1-2ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "clang-3.9-examples",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "clang-format-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "clang-tidy-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "libclang1-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "liblldb-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "libllvm3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "lldb-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "llvm-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "llvm-3.9-examples",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "llvm-3.9-runtime",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "llvm-3.9-tools",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "python-clang-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          },
          {
            "binary_name": "python-lldb-3.9",
            "binary_version": "1:3.9.1-4ubuntu3~16.04.2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-3.9",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.9@1:3.9.1-4ubuntu3~16.04.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.9.1-4ubuntu3~16.04.1",
        "1:3.9.1-4ubuntu3~16.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "clang-8-examples",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "clang-format-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "clang-tidy-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "clang-tools-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "libc++1-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "libc++abi1-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "libclang1-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "liblld-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "liblldb-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "libllvm8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "libomp5-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "lld-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "lldb-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "llvm-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "llvm-8-examples",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "llvm-8-runtime",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "llvm-8-tools",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "python-clang-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          },
          {
            "binary_name": "python-lldb-8",
            "binary_version": "1:8-3~ubuntu16.04.1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "llvm-toolchain-8",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-8@1:8-3~ubuntu16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8-3~ubuntu16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "clang-10-examples",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "clang-format-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "clang-tidy-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "clang-tools-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "clangd-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "libc++1-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "libc++abi1-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "libclang-cpp10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "libclang1-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "liblld-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "liblldb-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "libllvm10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "libomp5-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "lld-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "lldb-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "llvm-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "llvm-10-examples",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "llvm-10-runtime",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "llvm-10-tools",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "python3-clang-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          },
          {
            "binary_name": "python3-lldb-10",
            "binary_version": "1:10.0.0-4ubuntu1~18.04.2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-10",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-10@1:10.0.0-4ubuntu1~18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10.0.0-4ubuntu1~18.04.1",
        "1:10.0.0-4ubuntu1~18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "clang-3.9-examples",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "clang-format-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "clang-tidy-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "libclang1-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "liblldb-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "libllvm3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "lldb-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "llvm-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "llvm-3.9-examples",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "llvm-3.9-runtime",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "llvm-3.9-tools",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "python-clang-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          },
          {
            "binary_name": "python-lldb-3.9",
            "binary_version": "1:3.9.1-19ubuntu1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-3.9",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.9@1:3.9.1-19ubuntu1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.9.1-17ubuntu1",
        "1:3.9.1-18ubuntu1",
        "1:3.9.1-19ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "clang-6.0-examples",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "clang-format-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "clang-tidy-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "clang-tools-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "libclang1-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "liblld-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "liblldb-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "libllvm6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "lld-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "lldb-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "llvm-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "llvm-6.0-examples",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "llvm-6.0-runtime",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "llvm-6.0-tools",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "python-clang-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          },
          {
            "binary_name": "python-lldb-6.0",
            "binary_version": "1:6.0-1ubuntu2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-6.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-6.0@1:6.0-1ubuntu2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.0~+rc1-1",
        "1:6.0~+rc2-1",
        "1:6.0-1ubuntu1",
        "1:6.0-1ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "clang-7-examples",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "clang-format-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "clang-tidy-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "clang-tools-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "libc++1-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "libc++abi1-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "libclang1-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "liblld-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "liblldb-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "libllvm7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "libomp5-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "lld-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "lldb-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "llvm-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "llvm-7-examples",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "llvm-7-runtime",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "llvm-7-tools",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "python-clang-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          },
          {
            "binary_name": "python-lldb-7",
            "binary_version": "1:7-3~ubuntu0.18.04.1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-7",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-7@1:7-3~ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7-3~ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-8-examples",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-format-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-tidy-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-tools-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "libc++1-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "libc++abi1-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "libclang1-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "liblld-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "liblldb-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "libllvm8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "libomp5-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "lld-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "lldb-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-8-examples",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-8-runtime",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-8-tools",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "python-clang-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          },
          {
            "binary_name": "python-lldb-8",
            "binary_version": "1:8-3~ubuntu18.04.2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-8",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-8@1:8-3~ubuntu18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8-3~ubuntu18.04.1",
        "1:8-3~ubuntu18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-9-examples",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-format-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-tidy-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "clang-tools-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "clangd-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libc++1-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libc++abi1-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libclang-cpp1-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libclang-cpp9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libclang1-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "liblld-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "liblldb-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libllvm9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "libomp5-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "lld-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "lldb-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-9-examples",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-9-runtime",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "llvm-9-tools",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "python-clang-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "python-lldb-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          },
          {
            "binary_name": "python3-lldb-9",
            "binary_version": "1:9-2~ubuntu18.04.2"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-9",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-9@1:9-2~ubuntu18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9-2~ubuntu18.04.1",
        "1:9-2~ubuntu18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libllvm3.7",
            "binary_version": "1:3.7.1-5ubuntu3"
          },
          {
            "binary_name": "llvm-3.7",
            "binary_version": "1:3.7.1-5ubuntu3"
          },
          {
            "binary_name": "llvm-3.7-examples",
            "binary_version": "1:3.7.1-5ubuntu3"
          },
          {
            "binary_name": "llvm-3.7-runtime",
            "binary_version": "1:3.7.1-5ubuntu3"
          },
          {
            "binary_name": "llvm-3.7-tools",
            "binary_version": "1:3.7.1-5ubuntu3"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-3.7",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-3.7@1:3.7.1-5ubuntu3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:3.7.1-5ubuntu3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "clang-4.0-examples",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "clang-format-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "clang-tidy-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "clang-tools-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "libclang1-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "liblld-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "liblldb-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "libllvm4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "lld-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "lldb-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "llvm-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "llvm-4.0-examples",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "llvm-4.0-runtime",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "llvm-4.0-tools",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "python-clang-4.0",
            "binary_version": "1:4.0.1-10"
          },
          {
            "binary_name": "python-lldb-4.0",
            "binary_version": "1:4.0.1-10"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-4.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-4.0@1:4.0.1-10?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:4.0.1-6",
        "1:4.0.1-8",
        "1:4.0.1-10"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "clang-5.0-examples",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "clang-format-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "clang-tidy-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "clang-tools-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "libclang1-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "liblld-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "liblldb-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "libllvm5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "lld-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "lldb-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "llvm-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "llvm-5.0-examples",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "llvm-5.0-runtime",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "llvm-5.0-tools",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "python-clang-5.0",
            "binary_version": "1:5.0.1-4"
          },
          {
            "binary_name": "python-lldb-5.0",
            "binary_version": "1:5.0.1-4"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "llvm-toolchain-5.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-5.0@1:5.0.1-4?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:5.0-3",
        "1:5.0-4",
        "1:5.0.1-1",
        "1:5.0.1-2",
        "1:5.0.1-4"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "clang-10-examples",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "clang-format-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "clang-tidy-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "clang-tools-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "clangd-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "libc++1-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "libc++abi1-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "libclang-cpp10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "libclang1-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "liblld-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "liblldb-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "libllvm10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "libomp5-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "lld-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "lldb-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "llvm-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "llvm-10-examples",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "llvm-10-runtime",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "llvm-10-tools",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "python3-clang-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          },
          {
            "binary_name": "python3-lldb-10",
            "binary_version": "1:10.0.0-4ubuntu1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-10",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-10@1:10.0.0-4ubuntu1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:10~++20200121023453+de4b2a7fad6-1~exp1",
        "1:10.0.0~+rc1-1~exp1",
        "1:10.0.0~+rc2-2~build2",
        "1:10.0.0~+rc2-2",
        "1:10.0.0~+rc3-1",
        "1:10.0.0~+rc3-1build1",
        "1:10.0.0~+rc4-1",
        "1:10.0.0~+rc5-1ubuntu1",
        "1:10.0.0-1ubuntu1",
        "1:10.0.0-1ubuntu2",
        "1:10.0.0-2ubuntu1",
        "1:10.0.0-2ubuntu2",
        "1:10.0.0-3",
        "1:10.0.0-4ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "clang-11-examples",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "clang-format-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "clang-tidy-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "clang-tools-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "clangd-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "libc++1-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "libc++abi1-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "libclang-cpp11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "libclang1-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "liblld-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "liblldb-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "libllvm11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "libomp5-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "lld-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "lldb-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "llvm-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "llvm-11-examples",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "llvm-11-runtime",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "llvm-11-tools",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "python3-clang-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          },
          {
            "binary_name": "python3-lldb-11",
            "binary_version": "1:11.0.0-2~ubuntu20.04.1"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-11",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-11@1:11.0.0-2~ubuntu20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:11.0.0-2~ubuntu20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "clang-12-examples",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "clang-format-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "clang-tidy-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "clang-tools-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "clangd-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libc++1-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libc++abi1-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libclang-cpp12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libclang1-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libclc-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "liblld-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "liblldb-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libllvm12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "libomp5-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "lld-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "lldb-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "llvm-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "llvm-12-examples",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "llvm-12-linker-tools",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "llvm-12-runtime",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "llvm-12-tools",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "python3-clang-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          },
          {
            "binary_name": "python3-lldb-12",
            "binary_version": "1:12.0.0-3ubuntu1~20.04.5"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-12",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-12@1:12.0.0-3ubuntu1~20.04.5?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:12.0.0-3ubuntu1~20.04.3",
        "1:12.0.0-3ubuntu1~20.04.4",
        "1:12.0.0-3ubuntu1~20.04.5"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "clang-9-examples",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "clang-format-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "clang-tidy-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "clang-tools-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "clangd-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libc++1-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libc++abi1-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libclang-cpp1-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libclang-cpp9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libclang1-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "liblld-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "liblldb-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libllvm9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "libomp5-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "lld-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "lldb-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "llvm-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "llvm-9-examples",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "llvm-9-runtime",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "llvm-9-tools",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "python-clang-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "python3-clang-9",
            "binary_version": "1:9.0.1-12"
          },
          {
            "binary_name": "python3-lldb-9",
            "binary_version": "1:9.0.1-12"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-9",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-9@1:9.0.1-12?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9-2",
        "1:9.0.0-3ubuntu2",
        "1:9.0.0-4ubuntu4",
        "1:9.0.1~+rc2-1~exp1",
        "1:9.0.1~+rc2-1~exp1ubuntu1",
        "1:9.0.1-1",
        "1:9.0.1-2",
        "1:9.0.1-6build1",
        "1:9.0.1-8build1",
        "1:9.0.1-8ubuntu1",
        "1:9.0.1-9ubuntu1",
        "1:9.0.1-10",
        "1:9.0.1-11",
        "1:9.0.1-11ubuntu1",
        "1:9.0.1-12"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "clang-6.0-examples",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "clang-format-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "clang-tidy-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "clang-tools-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "libclang1-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "liblld-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "liblldb-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "libllvm6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "lld-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "lldb-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "llvm-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "llvm-6.0-examples",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "llvm-6.0-runtime",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "llvm-6.0-tools",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "python-clang-6.0",
            "binary_version": "1:6.0.1-14"
          },
          {
            "binary_name": "python-lldb-6.0",
            "binary_version": "1:6.0.1-14"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-6.0",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-6.0@1:6.0.1-14?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:6.0.1-11",
        "1:6.0.1-11ubuntu1",
        "1:6.0.1-12",
        "1:6.0.1-14"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "clang-7-examples",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "clang-format-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "clang-tidy-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "clang-tools-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "libc++1-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "libc++abi1-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "libclang1-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "liblld-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "liblldb-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "libllvm7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "libomp5-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "lld-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "lldb-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "llvm-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "llvm-7-examples",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "llvm-7-runtime",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "llvm-7-tools",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "python-clang-7",
            "binary_version": "1:7.0.1-12"
          },
          {
            "binary_name": "python-lldb-7",
            "binary_version": "1:7.0.1-12"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-7",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-7@1:7.0.1-12?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:7.0.1-9build1",
        "1:7.0.1-9ubuntu2",
        "1:7.0.1-10",
        "1:7.0.1-10build1",
        "1:7.0.1-12"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "clang-8-examples",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "clang-format-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "clang-tidy-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "clang-tools-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "clangd-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "libc++1-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "libc++abi1-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "libclang1-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "liblld-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "liblldb-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "libllvm8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "libomp5-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "lld-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "lldb-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "llvm-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "llvm-8-examples",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "llvm-8-runtime",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "llvm-8-tools",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "python-clang-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "python-lldb-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "python3-clang-8",
            "binary_version": "1:8.0.1-9"
          },
          {
            "binary_name": "python3-lldb-8",
            "binary_version": "1:8.0.1-9"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "llvm-toolchain-8",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-8@1:8.0.1-9?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:8.0.1-3build1",
        "1:8.0.1-4",
        "1:8.0.1-4ubuntu3",
        "1:8.0.1-7build1",
        "1:8.0.1-7ubuntu1",
        "1:8.0.1-8ubuntu1",
        "1:8.0.1-9"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "clang-11-examples",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "clang-format-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "clang-tidy-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "clang-tools-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "clangd-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "libc++1-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "libc++abi1-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "libclang-cpp11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "libclang1-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "liblld-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "liblldb-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "libllvm11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "libomp5-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "lld-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "lldb-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "llvm-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "llvm-11-examples",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "llvm-11-linker-tools",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "llvm-11-runtime",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "llvm-11-tools",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "python3-clang-11",
            "binary_version": "1:11.1.0-6"
          },
          {
            "binary_name": "python3-lldb-11",
            "binary_version": "1:11.1.0-6"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "llvm-toolchain-11",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-11@1:11.1.0-6?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:11.0.1-2ubuntu5",
        "1:11.1.0-6"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "clang-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "clang-12-examples",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "clang-format-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "clang-tidy-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "clang-tools-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "clangd-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libc++1-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libc++abi1-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libclang-cpp12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libclang1-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libclc-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "liblld-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "liblldb-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libllvm12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libomp5-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "libunwind-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "lld-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "lldb-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "llvm-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "llvm-12-examples",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "llvm-12-linker-tools",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "llvm-12-runtime",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "llvm-12-tools",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "python3-clang-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          },
          {
            "binary_name": "python3-lldb-12",
            "binary_version": "1:12.0.1-19ubuntu3"
          }
        ],
        "priority_reason": "Upstream doesn\u0027t consider this to be an important issue"
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "llvm-toolchain-12",
        "purl": "pkg:deb/ubuntu/llvm-toolchain-12@1:12.0.1-19ubuntu3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:12.0.1-8build1",
        "1:12.0.1-16",
        "1:12.0.1-19ubuntu3"
      ]
    }
  ],
  "aliases": [],
  "details": "LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can sometimes be an exploitable error in the flow of control. This affects the ARM backend and can be demonstrated with Clang. NOTE: the vendor perspective is \"we don\u0027t have strong objections for a CVE to be created ... It does seem that the likelihood of this miscompile enabling an exploit remains very low, because the miscompile resulting in this JOP gadget is such that the function is most likely to crash on most valid inputs to the function. So, if this function is covered by any testing, the miscompile is most likely to be discovered before the binary is shipped to production.\"",
  "id": "UBUNTU-CVE-2024-31852",
  "modified": "2026-04-22T07:48:47Z",
  "published": "2024-04-05T15:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-31852"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/llvm/llvm-project/issues/80287"
    },
    {
      "type": "REPORT",
      "url": "https://llvm.org/docs/Security.html"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/llvmbot/llvm-project/commit/0e16af8e4cf3a66ad5d078d52744ae2776f9c4b2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-31852"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2024-31852"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…