PT-2019-14590 · Lmdb+2 · Py-Lmdb+2
Published
2019-09-11
·
Updated
2026-03-25
·
CVE-2019-16228
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
py-lmdb version 0.97
Description
An issue was discovered in the function
mdb env open2 where a divide-by-zero error occurs if mdb env read header obtains a zero value for a certain size field. This issue arises when accessing a data.mdb file supplied by an attacker.Recommendations
For py-lmdb version 0.97, consider avoiding the use of
mdb env open2 function when accessing untrusted data.mdb files until a patch is available. As a temporary workaround, restrict access to potentially malicious data.mdb files to minimize the risk of exploitation.Exploit
Fix
Divide By Zero
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Py-Lmdb