CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 5.39.2 are vulnerable to a network amplification issue in the handling of ActorEventPacket, allowing attackers to exploit this flaw by sending specially crafted messages that trigger excessive animation events for all visible players. This can lead to significant resource consumption on the server, impacting performance and availability. Server administrators using affected versions should prioritize applying the update to mitigate potential denial-of-service scenarios.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 5.39.2 contain a network amplification vulnerability in ActorEventPacket handling that allows clients to trigger consuming animations for all visible players. Attackers can send crafted ActorEventPacket messages to spam animation events to other clients and waste server CPU and memory resources.