CVE-2019-16228: py-lmdb Divide by Zero interruptions

May 24, 2022 (updated September 30, 2024)

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field.

References

github.com/TeamSeri0us/pocs/tree/master/lmdb/FPE
github.com/advisories/GHSA-ggwq-vrgp-6gv4
github.com/jnwatson/py-lmdb
github.com/pypa/advisory-database/tree/main/vulns/lmdb/PYSEC-2019-240.yaml
nvd.nist.gov/vuln/detail/CVE-2019-16228
pypi.org/project/lmdb

Detect and mitigate CVE-2019-16228 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →