belangeo/pyo · Security
Classic Buffer Overflow in pyo
- GHSA ID
- GHSA-5f5c-687x-g5qm
- CVE ID
- CVE-2021-41499
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Buffer Overflow Vulnerability exists in ajaxsoundstudio.com in Pyo < 1.03 in the Server_debug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name.
CWEs
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')