GHSA-qj27-32wp-ghrg

Pyo Buffer Overflow Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2021-41498

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	pyo	< 1.0.4	1.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

Buffer overflow in ajaxsoundstudio.com Pyo <= 1.03 in the `Server_jack_init function` which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong `client_name`.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-41498 advisory
https://github.com/belangeo/pyo/issues/221 web
https://github.com/belangeo/pyo/commit/017702c73332a8560c8554a36250a6da587a2418 web
https://github.com/belangeo/pyo package
https://github.com/pypa/advisory-database/tree/main/vulns/pyo/PYSEC-2021-890.yaml web