SUSE CVE-2019-16227

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

EUVD-2019-0079

Malware in sbrugna...

EUVD-2019-0077

Malware in sbrugna...

EUVD-2019-0080

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-16228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size...

acuity (=6.18.0), acuitypro (=6.18.0) +3 more potentially affected by CVE-2019-16227 via lmdb (>=0.92.0 <=0.96.0)

lmdb PYPI version =0.92.0, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16227 Source advisory: OSV:GHSA-PF3P-V9XP-MRVF...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check. PoC js var lmdb = require"node-lmdb"; var fs = require'fs' var dbname = '/mydata' if !fs.existsSyncdbname fs.mkdirSyncdbname...

Denial Of Service (DoS)

python-lmdb is vulnerable to denial of service. An application crash occurs when mdbcursoropen fails. The crash will occur when cpython is built with PyTRACEREFS...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16225 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16225 Source advisory: OSV:PYSEC-2019-237...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16226 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16226 Source advisory: OSV:PYSEC-2019-238...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16227 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16227 Source advisory: SNYK:PYTHON-LMDB-11959239...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16227 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16227 Source advisory: OSV:PYSEC-2019-239...

Divide By Zero

Overview lmdb is an Universal Python binding for the LMDB 'Lightning' Database. Affected versions of this package are vulnerable to Divide By Zero. An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a...

CVE-2019-16224

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

acuity (=6.18.0), acuitypro (=6.18.0) +4 more potentially affected by CVE-2019-16228 via lmdb (>=0.92.0 <=0.97.0)

lmdb PYPI version =0.92.0, =0.1.13, =0.0.0, =0.100.2, =0.100.3rc1 Source cves: CVE-2019-16228 Source advisory: SNYK:PYTHON-LMDB-11959241...

CVE-2019-16227

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

PT-2019-14589

Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97 Description An issue was discovered in py-lmdb where for certain values of mn flags, mdb cursor set triggers a memcpy with an invalid write operation within mdb xcursor init1. This issue occurs when accessing a data.mdb fi...