CVE-2022-51011
Received Received - Intake

PocketMine-MP Chat Message Length Validation Flaw

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: VulnCheck

Description
PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages containing many newlines. Malicious clients can send megabyte-sized chat packets and bombard the server with thousands of such messages, causing server lockups lasting seconds or minutes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2022-51011
EUVD
EUVD-2022-56040

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
pocketmine mp to 4.2.10 (exc)
pocketmine-mp pocketmine-mp to 4.2.10 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2022-51011 is a denial-of-service (DoS) vulnerability in PocketMine-MP, a Minecraft server software. It occurs when the server fails to validate the total length of incoming chat messages before splitting them by newline characters. Attackers exploit this by sending large messages with many newlines, causing the server to process excessive message parts and become unresponsive.

Detection Guidance

Monitor PocketMine-MP server logs for unusually large chat messages or excessive newline characters. Check for server lockups or high CPU usage during chat interactions. Use network monitoring tools to detect large or frequent chat packets from clients.

Impact Analysis

This vulnerability can cause server lockups lasting seconds or minutes, degrading performance or crashing the server. It may disrupt gameplay for users and require server restarts to recover. Attackers can exploit it to flood servers with thousands of malicious messages.

Mitigation Strategies

Upgrade PocketMine-MP to version 4.2.10 or later to apply the official patch. Implement rate limiting for chat messages to prevent flooding. Monitor server performance and block clients sending excessively large messages.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2022-51011. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart