| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/pterodactyl/wings | < 1.4.4 | 1.4.4 |
| wings | < 1.4.4 | 1.4.4 |
All versions of Pterodactyl Wings preior to 1.4.4 are vulnerable to system resource exhaustion due to improper container process limits being defined. A malicious user can consume more resources than intended and cause downstream impacts to other clients on the same hardware, eventually causing the physical server to stop responding.
Users should upgrade to 1.4.4.
There is no non-code based workaround for impacted versions of the software. Users running customized versions of this software can manually set a PID limit for containers created.
If you have any questions or comments about this advisory:
dane ät pterodactyl dot ioRunning one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free