medium6.5
CVE-2024-58380
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slo…
Impact
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.
Affected products
| Product | Affected versions |
|---|---|
| PocketMine-MP | before 5.11.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.