USN-7913-1: MAME vulnerabilities
It was discovered that the stb library, included in MAME, had a heap-based buffer overflow. An attacker could possibly use this issue to crash the program or execute arbitrary code. (CVE-2018-16981) It was discovered that the tinyexr library, included in MAME, had a heap- based buffer over-read in the function DecodePixelData. An attacker could possibly use this issue to expose sensitive information or crash the program. (CVE-2022-34300) It was discovered that the expat library, included in MAME, had an integer-overflow in the function doProlog. An attacker could possibly use this issue to crash the program or execute arbitrary code. (CVE-2021-46143)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.277+dfsg.1-4ubuntu0.1 - Upgrade
Upgrade
ubuntu/mame-datato a version that resolves this vulnerability.Fixed in 0.277+dfsg.1-4ubuntu0.1 - Upgrade
Upgrade
ubuntu/mame-toolsto a version that resolves this vulnerability.Fixed in 0.277+dfsg.1-4ubuntu0.1 - Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in 0.275+dfsg.1-3ubuntu0.1 - Upgrade
Upgrade
ubuntu/mame-datato a version that resolves this vulnerability.Fixed in 0.275+dfsg.1-3ubuntu0.1 - Upgrade
Upgrade
ubuntu/mame-toolsto a version that resolves this vulnerability.Fixed in 0.275+dfsg.1-3ubuntu0.1 - Upgrade
Upgrade
ubuntu/mameto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/mame-datato a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/mame-toolsto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Child vulnerabilities
Contains the following vulnerabilities.