GHSA-5f5c-687x-g5qm

Classic Buffer Overflow in pyo

Source: GitHub Advisory Database (reviewed) High CVE-2021-41499

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	pyo	< 1.0.3	1.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com in Pyo < 1.03 in the Server_debug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-41499 advisory
https://github.com/belangeo/pyo/issues/222 web
https://github.com/belangeo/pyo package