CVE catalog
CVE-2021-41499
python-pyo: CVE-2021-41499
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.41% · Oct 25, 2026
Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | python-pyo | sid | 1.1.0-1 | fixed |
| Debian | python-pyo | forky | 1.1.0-1 | fixed |
| Debian | python-pyo | trixie | 1.0.6-1 | fixed |
| Debian | python-pyo | bookworm | 1.0.4-1 | fixed |
| Ubuntu | python-pyo | 16.04 | 0.7.6-1 | vulnerable |
| Ubuntu | python-pyo | 16.04 | 0.7.6+git20150902.a1d7123d76-1 | vulnerable |
| Ubuntu | python-pyo | 16.04 | 0.7.8-1 | vulnerable |
| Ubuntu | python-pyo | 16.04 | 0.7.8+git20160129-1 | vulnerable |
| Ubuntu | python-pyo | 18.04 | 0.8.6-1build2 | vulnerable |
| Ubuntu | python-pyo | 18.04 | 0.8.7-1 | vulnerable |
| Ubuntu | python-pyo | 18.04 | 0.8.8-1 | vulnerable |
| Ubuntu | python-pyo | 20.04 | 0.9.1-1 | vulnerable |
| Ubuntu | python-pyo | 20.04 | 0.9.1-1build1 | vulnerable |
| Ubuntu | python-pyo | 20.04 | 1.0.0-2 | vulnerable |
| Ubuntu | python-pyo | 20.04 | 1.0.0-2.1 | vulnerable |
| Ubuntu | python-pyo | 20.04 | 1.0.0-2.1build1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | python-pyo | source | sid | 1.0.4-1 | not yet assigned | Not reported | Not reported |
| Debian | python-pyo | source | forky | 1.0.4-1 | not yet assigned | Not reported | Not reported |
| Debian | python-pyo | source | trixie | 1.0.4-1 | not yet assigned | Not reported | Not reported |
| Debian | python-pyo | source | bookworm | 1.0.4-1 | not yet assigned | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [python3-pyo]Fixed
Source package: [python-pyo]
Details (2)
1.0.4-1+b4· arm64 · bookwormFixed · Fixed:
1.0.4-1dsa · python-pyo · debian · bookworm; dsa · python-pyo · debian · 12
1.0.4-1+b5· amd64 · bookwormFixed · Fixed:
1.0.4-1dsa · python-pyo · debian · bookworm; dsa · python-pyo · debian · 12
[Debian 13 (Trixie)]
- [python3-pyo]Fixed
Source package: [python-pyo]
Details (2)
1.0.6-1· amd64 · trixieFixed · Fixed:
1.0.4-1dsa · python-pyo · debian · 13
1.0.6-1· arm64 · trixieFixed · Fixed:
1.0.4-1dsa · python-pyo · debian · 13
Observed: