acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16224 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16224 Source advisory: SNYK:PYTHON-LMDB-11959240...

CVE-2019-16224

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

CVE-2019-16224

The CVE-2019-16224 entry relates to py-lmdb 0.97, where for certain md_flags values mdb_node_add fails to set up a memcpy destination, causing an invalid write when a data.mdb file is supplied by an attacker. This is described across multiple feeds (NVD OSV Ubuntu/Debian/NASL/CNVD entries) as a b...