CVE-2019-16228

Name of the Vulnerable Software and Affected Versions py-lmdb version 0.97

Description An issue was discovered in the function mdb env open2 where a divide-by-zero error occurs if mdb env read header obtains a zero value for a certain size field. This issue arises when accessing a data.mdb file supplied by an attacker.

Recommendations For py-lmdb version 0.97, consider avoiding the use of mdb env open2 function when accessing untrusted data.mdb files until a patch is available. As a temporary workaround, restrict access to potentially malicious data.mdb files to minimize the risk of exploitation.