CVE-2021-41498: Pyo Buffer Overflow Vulnerability

December 18, 2021 (updated November 26, 2024)

Buffer overflow in ajaxsoundstudio.com Pyo <= 1.03 in the Server_jack_init function which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong client_name.

References

github.com/advisories/GHSA-qj27-32wp-ghrg
github.com/belangeo/pyo
github.com/belangeo/pyo/commit/017702c73332a8560c8554a36250a6da587a2418
github.com/belangeo/pyo/issues/221
github.com/pypa/advisory-database/tree/main/vulns/pyo/PYSEC-2021-890.yaml
nvd.nist.gov/vuln/detail/CVE-2021-41498

Code Behaviors & Features

Detect and mitigate CVE-2021-41498 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →