Описание
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.
EPSS
Процентиль: 31%
0.00376
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 6.5
github
10 дней назад
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.
EPSS
Процентиль: 31%
0.00376
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-20