PT-2021-23313 · Pyo+1 · Pyo+1

Awen-Lio · Published 2021-12-17 · Updated 2022-01-07 · CVE-2021-41499

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pyo versions prior to 1.03

Description A Buffer Overflow issue exists in the Server debug function, allowing remote attackers to conduct Denial of Service (DoS) attacks by passing an overlong audio file name.

Recommendations For versions prior to 1.03, as a temporary workaround, consider disabling the Server debug function until a patch is available. Restrict access to the Server debug function to minimize the risk of exploitation. Avoid using overlong audio file names in the affected function until the issue is resolved.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2021-41499

GHSA-5F5C-687X-G5QM

Affected Products

Debian

Pyo

References · 12

• 🔥 https://github.com/belangeo/pyo/issues/222 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-41499 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-41499 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-5f5c-687x-g5qm · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-41499 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-41499 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-41499 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41499 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-41499 · Vendor Advisory
• https://github.com/belangeo/pyo/commit/e7e6d2880469b523e4c41f0da2087a6a3eec4a45 · Note
• https://github.com/belangeo/pyo · Note
• https://t.me/cibsecurity/34237 · Telegram Post