CVE-2022-51014highCWE-248

CVE-2022-51014: fallo de gravedad alta en pmmp PocketMine-MP

PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear PocketMine-MP+ Monitorear pocketmine/pocketmine-mp

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.1epss 0.5%
PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when processing malformed JSON from clients. Attackers can send specially crafted form response packets with invalid JSON to trigger an uncaught InvalidArgumentException, causing server crashes.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
pmmp · PocketMine-MP
CVEs relacionadas — pmmp PocketMine-MP

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-58381HIGHPocketMine-MP before 5.11.1 Denial of Service via LoginPacketEPSS 0.8%CVE-2022-51015HIGHPocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacketEPSS 0.7%CVE-2026-86200MEDIUMPocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTEPSS 0.6%CVE-2023-54393HIGHPocketMine-MP before 4.20.5 Denial of Service via LoginPacketEPSS 0.6%CVE-2022-51017HIGHPocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin DataEPSS 0.6%CVE-2026-86201HIGHPocketMine-MP before 5.41.1 LogDoS via LoginPacket clientDataEPSS 0.6%