Description
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
pmmp PocketMine-MP
Default version status: unaffected
0 to < 5.11.2affected5.11.2unaffected
pkg:composer/pocketmine/pocketmine-mp