CVE-2019-16224

The CVE-2019-16224 entry relates to py-lmdb 0.97, where for certain md_flags values mdb_node_add fails to set up a memcpy destination, causing an invalid write when a data.mdb file is supplied by an attacker. This is described across multiple feeds (NVD OSV Ubuntu/Debian/NASL/CNVD entries) as a b...

CVE-2019-16226

CVE-2019-16226 affects py-lmdb 0.97. The vulnerability arises in the mdb_node_del function, which does not validate a memmove when encountering an unexpected node->mn_hi, leading to an invalid write operation. This is described as occurring when accessing a data.mdb file supplied by an attacke...

CVE-2019-16228

CVE-2019-16228 affects py-lmdb 0.97. A divide-by-zero occurs in mdb_env_open2 when mdb_env_read_header yields a zero value for a size field, note that this can occur when accessing a data.mdb file supplied by an attacker. The connected documents corroborate the same issue across multiple sources ...

CVE-2019-16227

CVE-2019-16227 affects py-lmdb 0.97. The issue arises when mn_flags trigger a memcpy with an invalid write in mdb_xcursor_init1 during mdb_cursor_set, potentially exposing data.mdb to attacker-controlled data and enabling memory corruption. Public sources consistently describe a write/read bounda...

CVE-2019-16225

The CVE-2019-16225 entry concerns py-lmdb (version 0.97). Affects the mdb_page_touch path where certain mp_flags values prevent mc->mc_pg[mc->top] from being set up correctly, causing an invalid write operation when a data.mdb file is accessed. Public details describe the root cause and the...