CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 5.44.2 are vulnerable to improper validation of ResourcePackClientResponsePacket packets, allowing malicious clients to exploit this flaw. This can lead to the creation of duplicate Player objects, resulting in increased memory consumption and network traffic, which may degrade server performance. Administrators of PocketMine-MP servers should prioritize updating to the latest version to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 5.44.2 fail to properly validate multiple ResourcePackClientResponsePacket packets with STATUS_COMPLETED status during resource pack handling. Malicious clients can send batches of these packets to repeatedly trigger pre-spawn progression, creating duplicate Player objects and amplifying memory consumption and network traffic.