Critical server bug patched by Mojang still affects Bukkit

Discussion in 'Bukkit Discussion' started by Tecno_Wizard, Apr 17, 2015.

Thread Status:
Not open for further replies.
  1. Offline

    Tecno_Wizard

    It's amazing what you find when you randomly Google stuff.
    2 years ago, a security researcher found a bug in spigot and Bukkit that will let you crash any server. 2 years later, it hasn't been patched.

    WARNING: ALL BUKKIT AND SPIGOT BUILDS 1.8.3 AND BELOW ARE VULNERABLE!
    Anyone can crash any server using a bug that causes a severe memory leak crashing the server entirely and without warning.
    http://www.extremetech.com/gaming/2...ft-exploit-that-made-it-easy-to-crash-servers
    http://blog.ammaraskar.com/minecraft-vulnerability-advisory/
    Please be aware of this and update your servers ASAP when the patch is released from the spigot team.
    (Yes, the build is unofficial, but it's the unofficial build or your entire server at risk)
     
Thread Status:
Not open for further replies.

Share This Page