GHSA-r8g9-w4f3-9crm

Source

https://github.com/advisories/GHSA-r8g9-w4f3-9crm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-r8g9-w4f3-9crm/GHSA-r8g9-w4f3-9crm.json

Aliases

• CVE-2019-16226
• PYSEC-2019-238

Published

2022-05-24T16:55:55Z

Modified

2024-02-16T08:15:54.782579Z

Details

An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-16226
• https://github.com/jnwatson/py-lmdb/issues/210
• https://github.com/LMDB/lmdb/blob/mdb.master/libraries/liblmdb/mdb.c#L8443-L8498
• https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memory%20corruption%20vuln
• https://github.com/jnwatson/py-lmdb