acuity (6.18.0), acuitylite (>=6.0.0, <=6.27.0) +5 more potentially affected by CVE-2019-16224 via lmdb (>=0.92.0, <=0.97.0)

lmdb PYPI version =0.92.0, =6.0.0, =0.1.13, =0.0.0, =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2019-16224 Source advisory: OSV:PYSEC-2019-236...

CVE-2019-16224

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

CVE-2019-16224

The CVE-2019-16224 entry relates to py-lmdb 0.97, where for certain md_flags values mdb_node_add fails to set up a memcpy destination, causing an invalid write when a data.mdb file is supplied by an attacker. This is described across multiple feeds (NVD OSV Ubuntu/Debian/NASL/CNVD entries) as a b...