PatchFirst · Vulnérabilités récentes
Vulnérabilités connues concernant pocketmine/pocketmine-mp 5.41.1 : 2. Comparez les versions corrigées ci-dessous avec celle que vous utilisez.
Vulnérabilités : 2
PocketMine-MP versions before 5.42.1 contain a denial of service vulnerability in the LoginPacket handler that allows remote attackers to flood warning messages by injecting numerous junk properties into the clientData JWT. Attackers can craft malicious login packets with excessive unknown properties to waste server CPU time and degrade performance.
PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUS_COMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player objects and amplifying memory consumption and network traffic.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.