Critical flaw in Minecraft's code meant anybody could crash any server
The easily triggerable exploit, which involves flooding the server with infinitely looping requests for information about a specific inventory slot, brings Minecraft to its digital knees and starves the machines of CPU and memory.
Rather alarmingly, it's claimed that the vulnerability was privately revealed to Mojang almost two years ago, and that no action was taken by the developer at the time.
The coder who discovered the flaw, Ammar Askar, said he had made repeated attempts to draw Mojang's attention to the bug, before giving up and taking the drastic measure of publicly revealing it on his blog. Ars Technica has the nitty gritty.
"The version of the game when the vulnerability was reported was 1.6.2, the game is now on version 1.8.3," wrote Askar. "That's right, two major versions and dozens of minor versions and a critical vulnerability that allows you to crash any server, and starve the actual machines of CPU and memory was allowed to exist."
The now publicly available and easily recreatable exploit has finally drawn the attention of Mojang, who have been in touch with Askar and issued a fix.
Posted:
Related Forum: PC Gaming Forum
Source: http://www.pcgamesn.com/minecraft/a-critical-flaw-in-minecrafts-code-meant-anybody-could-crash-any-server
Related Articles
Comments
1989Posted:
XGN they will prolly do nothing about this just like Microsoft getting better protection for their servers
Its not Microsofts problem, Mojang left this to them and now MS are fixing it.
1989Posted:
Rin Not surprised. Minecraft is poorly coded and a joke to gaming.
But still gets a ton of money from all the kids.
EarnPosted:
This bug was out for over 2 years and for what I understand has never happened.. I don't think it was that big off a problem.
ItalianPosted:
Mojang did nothing before when they owned themselves.
Now that Microsoft owns them I see this being fixed as soon as possible.
Sad to see a company truly ignore a HUGE FLAW in their game because "who cares"
Now that Microsoft owns them I see this being fixed as soon as possible.
Sad to see a company truly ignore a HUGE FLAW in their game because "who cares"
PryzelPosted:
Wow, if they had know about it for 2 years and not fixed it it's pretty bad from Mojang.
Latest Downloads
- 01. PainKiller Supernatural 2.0: SaveGame(0)
- 02. Supermarket Simulator: SaveGame (100lvl, 100k money) [0.12.4](0)
- 03. [EU/JP] Code Vein CUSA09824 Exalted Reputation Trophy and Proven Devotion(2)
- 04. Five Nights At Freddy's 3: Save Game (completed everything 100%(0)
- 05. [US] CUSA13597 Kingdom Two Crowns _ Never Gives Up +A Journey Is Better Shared(1)
- 06. Need for Speed: Underground 2 - Save Game (6% completed)(0)
- 07. Drake of the 99 Dragons: SaveGame (The game done 100%) [1.0](1)
- 08. Lara Croft: Tomb Raider - The Angel of Darkness - SaveGame (The game done 100%) [GoG](0)
- 09. My Summer Car: SaveGame (Aggressive satsuma, 6k marks)(0)
- 10. My Summer Car: SaveGame (green BMW E30)(0)
- 11. [EU] ADR1FT Trophies Game Save [CUSA02519](1)
- 12. Tekken 2 100% save game file for Retroarch european version(1)
- 13. My Summer Car: SaveGame (living in an apartment)(0)
- 14. Need for Speed: Most Wanted (2005) - SaveGame (100 cars in the showroom)(7)
- 15. Horizon Forbidden West: SaveGame (100%, before DLC) [1.0.38.0](9)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(682)
- 02. Russian Pinocchio Quick Trophy Guide(957)
- 03. Venatrix Quick Trophy & Achievement Guide(979)
- 04. Call of the Sea 100% Platinum Walkthrough(926)
- 05. Wire Lips 100% Platinum Walkthrough(1,034)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(916)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(803)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(712)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(739)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(690)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(916)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(955)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(644)
- 14. Remoteness 100% All Trophies Walkthrough(1,045)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(741)
"Critical flaw in Minecraft's code meant anybody could crash any server" :: Login/Create an Account :: 20 comments