BDS-15528Please fix CVE-2021-45383 & CVE-2021-45384
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. I can send a disconnectPacket to bds, causing bds to crash.Hope mojang can pay attention and fix it.This bug may involve realms.
ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
This is the fix plan of the community
https://github.com/LiteLDev/LiteLoaderBDS/blob/main/LiteLoader/Main/BuiltinBugFix.cpp
CVE-2021-45383 & CVE-2021-45384
https://github.com/nt1dr/CVE-2021-45383
Linked Issues
is duplicated by4
BDS-11598a disconnet crash bugDuplicateBDS-16701Network-layer Vulnerabilities - Bad data packet cause BDS to crashDuplicateBDS-16752Several network layer vulnerabilities exist that seriously harm the security of the BDS serverDuplicateMCPE-150816Security vulnerability: NULL pointer dereference in ServerNetworkHandler::handle(DisconnectPacket)Duplicate
Comments4
History33
Changed description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
Changed description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
SHIG`~0DVVFX`KLDNZ3_1EH-1.pngChanged description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
Changed description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
Changed description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability.
ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
Changed description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. I can send a disconnectPacket to bds, causing bds to crash.Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
This is the fix plan of the community
LiteLoaderBDS/BugFix.cpp at master · LiteLDev/LiteLoaderBDS (github.com)
Added Security Level: Minecraft - Private
Added is duplicated by link: BDS-11598a disconnet crash bugDuplicate
Added affects versions: 1.16.200 1.16.201 Hotfix
Added affects versions: 1.17.34
Added affects versions: 1.17.40
Added affects versions: 1.18.0
Added affects versions: 1.18.2 Hotfix
Added is duplicated by link: BDS-16701Network-layer Vulnerabilities - Bad data packet cause BDS to crashDuplicate
Changed description:
This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. I can send a disconnectPacket to bds, causing bds to crash.Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
This is the fix plan of the community
0This vulnerability has existed in many versions. After reverse-engineering the BDS, it is found that disconnectPacket lacks ServerPlayer's judgment.There may have been many attackers targeting this vulnerability. I can send a disconnectPacket to bds, causing bds to crash.Hope mojang can pay attention and fix it.This bug may involve realms.
0ServerNetworkHandler::handle(NetworkIdentifier const &,DisconnectPacket const &)
0
ServerNetworkHandler::handle(NetworkIdentifier const &,LevelSoundEventPacketV2 const &) and so on.
0
This is the fix plan of the community
0CVE-2021-45383 & CVE-2021-45384
https://github.com/nt1dr/CVE-2021-45383
Added affects versions: 1.18.10
Added is duplicated by link: BDS-16752Several network layer vulnerabilities exist that seriously harm the security of the BDS serverDuplicate
Added affects versions: 1.18.12 Hotfix
Added affects versions: 1.18.30
Added affects versions: 1.19.2 Hotfix 1.19.0
Deleted comment:
As far as I can see, there are many more deserialization vulnerabilities that exist in bds
For example, CVE-2022-23884,CVE-2022-28535,CVE-2022-28536
These are the typical ones, and there are many similar to them
Added affects versions: 1.19.10
Resolution: Unresolved → Fixed
This is a tool that uses this vulnerability to crash BDS, written by testers.
CRASHBDS.zip
At the same time, I hope that Mojang can provide more detailed PDB files in the next version so that we can better evaluate and analyze bugs.
Please fix it. There is a organization named nhackers,used to attack BDServers by this bug
MEQS_KEEP_PRIVATE
This ticket won't cover all of the exploits that are reported in
BDS-16752. Maybe it is worth reopening so we can keep track of other vulnerabilities out there.Only the disconnect bug will be targeted here.