What is GHSA-jj6m-r8jc-2gp7?

GHSA-jj6m-r8jc-2gp7 is a security advisory published by GitHub Security Advisories with Medium severity. Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Which CVE IDs does GHSA-jj6m-r8jc-2gp7 cover?

GHSA-jj6m-r8jc-2gp7 covers the following CVE IDs: CVE-2021-32699. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jj6m-r8jc-2gp7?

GHSA-jj6m-r8jc-2gp7 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-jj6m-r8jc-2gp7?

GHSA-jj6m-r8jc-2gp7 affects 1 product, including: go/github.com/pterodactyl/wings:\u003c 1.4.4.

GHSA-jj6m-r8jc-2gp7MediumCVSS 6.5

Asymmetric Resource Consumption (Amplification) in Docker containers created by Wings

Vendor

GitHub Security Advisories

Published

June 23, 2021

Last Modified

January 29, 2023

🔗 CVE IDs covered (1)

CVE-2021-32699 →

📋 Description

Impact

All versions of Pterodactyl Wings preior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended and cause downstream impacts to other clients on the same hardware, eventually causing the physical server to stop responding.

Patches

Users should upgrade to 1.4.4.

Workarounds

There is no non-code based workaround for impacted versions of the software. Users running customized versions of this software can manually set a PID limit for containers created.

For more information

If you have any questions or comments about this advisory:

Contact us on Discord
Email us at dane ät pterodactyl dot io

🎯 Affected products1

go/github.com/pterodactyl/wings:< 1.4.4