Critical flaw in Minecraft's code meant anybody could crash any server
The easily triggerable exploit, which involves flooding the server with infinitely looping requests for information about a specific inventory slot, brings Minecraft to its digital knees and starves the machines of CPU and memory.
Rather alarmingly, it's claimed that the vulnerability was privately revealed to Mojang almost two years ago, and that no action was taken by the developer at the time.
The coder who discovered the flaw, Ammar Askar, said he had made repeated attempts to draw Mojang's attention to the bug, before giving up and taking the drastic measure of publicly revealing it on his blog. Ars Technica has the nitty gritty.
"The version of the game when the vulnerability was reported was 1.6.2, the game is now on version 1.8.3," wrote Askar. "That's right, two major versions and dozens of minor versions and a critical vulnerability that allows you to crash any server, and starve the actual machines of CPU and memory was allowed to exist."
The now publicly available and easily recreatable exploit has finally drawn the attention of Mojang, who have been in touch with Askar and issued a fix.
Posted:
Related Forum: PC Gaming Forum
Source: http://www.pcgamesn.com/minecraft/a-critical-flaw-in-minecrafts-code-meant-anybody-could-crash-any-server
Related Articles
Comments
JRMHPosted:
Unless it actually takes money out of their pockets, they won't do anything about it. Ridiculous.
I kinda wish I knew about this beforehand though, would love to go onto corrupt servers and do it. Lol.
I kinda wish I knew about this beforehand though, would love to go onto corrupt servers and do it. Lol.
DeluxeHazardPosted:
This is one thing that is so annoying about big companies. They learn about huge exploits or issues in their servers and do nothing about it. It will sooner or later affect their customers and they will be incredibly pissed off at the company for them not doing anything about it earlier to prevent the issue.
SkittlePosted:
This reminds me of the russian coder who found out how to delete any video from YouTube, I am surprised that Mojang did nothing to fix this!
Latest Downloads
- 01. Assassin's Creed 3 Save Game (Game completed 8%, until Chapter 4)(0)
- 02. Supermarket Simulator SaveGame (Quick start, 172 day, 65lvl)(0)
- 03. Caribbean Legend: SaveGame (before the start of the Dutch Gambit)(0)
- 04. Caribbean Legend: SaveGame (Passed the Secret Organization Gambit) [v1.0.0](0)
- 05. Jalopy: SaveGame (Pumped up LaikaGT)(0)
- 06. Assassin's Creed 3: Save Game (Game completed 8%, until Chapter 4)(3)
- 07. Supermarket Simulator: SaveGame (Quick start, 172 day, 65lvl)(0)
- 08. GoreBox: SaveGame (Ancient village of the Paleozoic era)(0)
- 09. Need for Speed: Most Wanted (2005) - SaveGame (0% career, 2 BMWs in the garage)(1)
- 10. [EU] CARX DRIFT RACING ONLINE - PROGRESS SAVE 6 SP DUO (CUSA15633)(10)
- 11. Fallout Shelter Modded Save PC(3)
- 12. Remember Me: SaveGame (The Game done 100%)(0)
- 13. The Long Drive: SaveGame (American pickup)(0)
- 14. Goemon's Great Adventure (US / NTSC) - Nintendo 64 Game Save(2)
- 15. The Long Drive: SaveGame (blue VW Beetle)(0)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(542)
- 02. Russian Pinocchio Quick Trophy Guide(653)
- 03. Venatrix Quick Trophy & Achievement Guide(659)
- 04. Call of the Sea 100% Platinum Walkthrough(745)
- 05. Wire Lips 100% Platinum Walkthrough(754)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(709)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(626)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(561)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(530)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(537)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(701)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(713)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(454)
- 14. Remoteness 100% All Trophies Walkthrough(730)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(600)
"Critical flaw in Minecraft's code meant anybody could crash any server" :: Login/Create an Account :: 20 comments