medium5.3
CVE-2022-51008
PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacke…
Impact
PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creating sessions without sending LoginPacket. Attackers can flood the server with unauthenticated connections that occupy max-player slots, preventing legitimate players from joining.
Affected products
| Product | Affected versions |
|---|---|
| PocketMine-MP | before 4.12.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.