Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-51014

PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when processing malformed JSON from clients. Attackers can send specially crafted form response packets with invalid JSON to trigger an uncaught InvalidArgumentException, causing server crashes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pmmp PocketMine-MP

Default version status: unaffected

  • 0 to < 4.0.7affected
  • 4.0.7unaffected
pkg:composer/pocketmine/pocketmine-mp

References