Detections
Analytics

SCA: security update for github.com/pterodactyl/wings (GHSA-jj6m-r8jc-2gp7)

medium Tenable Self-Hosted Container Security Plugin ID 416411

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Wings is the control plane software for the open source Pterodactyl game management system. All versions
 of Pterodactyl Wings prior to `1.4.4` are vulnerable to system resource exhaustion due to improper
 container process limits being defined. A malicious user can consume more resources than intended and
 cause downstream impacts to other clients on the same hardware, eventually causing the physical server to
 stop responding. Users should upgrade to `1.4.4` to mitigate the issue. There is no non-code based
 workaround for impacted versions of the software. Users running customized versions of this software can
 manually set a PID limit for containers created. (CVE-2021-32699)

See Also

https://github.com/advisories/GHSA-jj6m-r8jc-2gp7

Plugin Details

Severity: Medium

ID: 416411

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.3

Percentile: 50.9

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Low

Base Score: 2.1

Temporal Score: 1.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2021-32699

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/23/2021

Vulnerability Publication Date: 6/22/2021

Reference Information

CVE: CVE-2021-32699