Posted by Ron E on Jan 05
A heap buffer underflow vulnerability exists in the readline() function of
OpenLDAP’s Lightning Memory-Mapped Database (LMDB) mdb_load utility. The
vulnerability is triggered through malformed input data and results in an
out-of-bounds read one byte before an allocated heap buffer. This can lead
to information disclosure through heap memory leakage.
*Root Cause:*
The vulnerability occurs in the readline() function at line 214 of
mdb_load.c….
– Read More – Full Disclosure
