An issue was discovered in py-lmdb 0.97. For certain values of mn_flags
, mdb_cursor_set
triggers a memcpy with an invalid write operation within mdb_xcursor_init1
. NOTE: this outcome occurs when accessing a data.mdb
file supplied by an attacker.