Critical flaw in Minecraft's code meant anybody could crash any server
The easily triggerable exploit, which involves flooding the server with infinitely looping requests for information about a specific inventory slot, brings Minecraft to its digital knees and starves the machines of CPU and memory.
Rather alarmingly, it's claimed that the vulnerability was privately revealed to Mojang almost two years ago, and that no action was taken by the developer at the time.
The coder who discovered the flaw, Ammar Askar, said he had made repeated attempts to draw Mojang's attention to the bug, before giving up and taking the drastic measure of publicly revealing it on his blog. Ars Technica has the nitty gritty.
"The version of the game when the vulnerability was reported was 1.6.2, the game is now on version 1.8.3," wrote Askar. "That's right, two major versions and dozens of minor versions and a critical vulnerability that allows you to crash any server, and starve the actual machines of CPU and memory was allowed to exist."
The now publicly available and easily recreatable exploit has finally drawn the attention of Mojang, who have been in touch with Askar and issued a fix.
Posted:
Related Forum: PC Gaming Forum
Source: http://www.pcgamesn.com/minecraft/a-critical-flaw-in-minecrafts-code-meant-anybody-could-crash-any-server
Related Articles
Comments
1989Posted:
XGN they will prolly do nothing about this just like Microsoft getting better protection for their servers
Its not Microsofts problem, Mojang left this to them and now MS are fixing it.
1989Posted:
Rin Not surprised. Minecraft is poorly coded and a joke to gaming.
But still gets a ton of money from all the kids.
EarnPosted:
This bug was out for over 2 years and for what I understand has never happened.. I don't think it was that big off a problem.
ItalianPosted:
Mojang did nothing before when they owned themselves.
Now that Microsoft owns them I see this being fixed as soon as possible.
Sad to see a company truly ignore a HUGE FLAW in their game because "who cares"
Now that Microsoft owns them I see this being fixed as soon as possible.
Sad to see a company truly ignore a HUGE FLAW in their game because "who cares"
PryzelPosted:
Wow, if they had know about it for 2 years and not fixed it it's pretty bad from Mojang.
Latest Downloads
- 01. Pac-Man Championship Edition (Xbox 360)(0)
- 02. Crash Of The Titans (Xbox 360 - Game Save 93% complete)(0)
- 03. Titan Quest - Anniversary Edition: SaveGame (Level 85 caster)(0)
- 04. [EU] Space Roguelike Adventure (Insta-Plat Save) [CUSA35362](2)
- 05. Operation: Matriarchy - SaveGame (The Game done on hard difficulty) [1.0](1)
- 06. LEGO Star Wars: The Skywalker Saga - SaveGame (The game done 100%) [Steam](2)
- 07. Through the Woods: SaveGame (The Game done 100%) [Steam](1)
- 08. Humans are not that against Lizardwomen: SaveGame (The Game done 100%)(1)
- 09. Tekken 1 100% save game file for Retroarch US version(0)
- 10. The Expanse: A Telltale Series - SaveGame (all chapters are opened, trophies are unlocked)(1)
- 11. Need for Speed: Most Wanted (2005) - SaveGame (Good start, 6 cars) [1.0](1)
- 12. Commandos: Strike Force - SaveGame(1)
- 13. Mario Party 2 100% Complete Save(4)
- 14. Mario Party 2 (Virtual Console) Save(0)
- 15. My Summer Car: SaveGame (Satsuma blue moon)(0)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(789)
- 02. Russian Pinocchio Quick Trophy Guide(1,051)
- 03. Venatrix Quick Trophy & Achievement Guide(1,138)
- 04. Call of the Sea 100% Platinum Walkthrough(1,072)
- 05. Wire Lips 100% Platinum Walkthrough(1,170)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(1,021)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(949)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(802)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(846)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(797)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(1,076)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(1,051)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(745)
- 14. Remoteness 100% All Trophies Walkthrough(1,174)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(873)
"Critical flaw in Minecraft's code meant anybody could crash any server" :: Login/Create an Account :: 20 comments