+- Cuberite Forum (https://forum.cuberite.org)
+-- Forum: Cuberite (https://forum.cuberite.org/forum-4.html)
+--- Forum: Discussion (https://forum.cuberite.org/forum-5.html)
+--- Thread: Just-released Minecraft exploit makes it easy to crash game servers (/thread-1887.html)
Just-released Minecraft exploit makes it easy to crash game servers - LogicParrot - 04-25-2015
Is MCServer vulnerable to this?
http://arstechnica.com/security/2015/04/16/just-released-minecraft-exploit-makes-it-easy-to-crash-game-servers/
RE: Just-released Minecraft exploit makes it easy to crash game servers - NiLSPACE - 04-26-2015
This was already asked about a week ago
https://forum.cuberite.org/showthread.php?tid=1878I think xoft already fixed it, but I'm not completely sure.
RE: Just-released Minecraft exploit makes it easy to crash game servers - xoft - 04-26-2015
It's not exactly fixed, it's only that MCS has been immune to that one particular piece of code; however, if someone were to modify the code just a bit (go from 300 lists to 250 lists), they could still cause slight lag on the server. The server won't run out of memory nor use extreme amounts of CPU, it will just spend a bit more time decoding packets from that particular client, and then it kicks them right afterwards, so no more parsing.
True, it could still cause problems on tight architectures such as the RasPi, those are more RAM and CPU sensitive than x86-based platforms.