This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2022-51008 | BDVDB-2026-368583 Detail

pmmpPocketMine-MP

Description#

PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joining.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-770 Allocation of Resources Without Limits or Throttling

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.