PYSEC-2019-238

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/lmdb/PYSEC-2019-238.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2019-238

Aliases

Published

2019-09-11T15:15:00Z

Modified

2023-11-08T04:01:17.071800Z

Summary

[none]

Details

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.

References

Affected packages

PyPI / lmdb

Package

Name: lmdb; View open source insights on deps.dev
Purl: pkg:pypi/lmdb

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.98

Affected versions

0.*

0.58

0.59

0.60

0.61

0.62

0.63

0.64

0.65

0.66

0.67

0.68

0.69

0.70

0.71

0.73

0.74

0.75

0.76

0.77

0.78

0.79

0.80

0.81

0.82

0.83

0.84

0.85

0.86

0.87

0.88

0.89

0.91

0.92

0.93

0.94

0.95

0.96

0.97

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/lmdb/PYSEC-2019-238.yaml"