Chunk-Pregenerator-1.21-4.5.4
Curse Maven Snippet
What's new
Security Patch thanks to Banyourself.
The mod had a few packets that could be exploited to cause lag on servers.
No RemoteCodeExecution was possible, just spam targets
Changelog:
- Fixed: DiscPacket had no auth check and could cause CPU/Storage lag (Disk Packet shows basically a layout of the entire safefile but only for a GUI and no write access at all)
- Fixed: MemoryPacket had no auth check and could cause excessive CPU/Storage lag (The packet shows Free/Used Storagespace)
- Fixed: ProgressPacket.Cancel had no auth check and anyone could cancel mini tasks without permissions.
- Fixed: RetrogenPacket.Sync had an exploit where a client side packet could be send to the server and allow to bypass auth checks. (so anyone could change the retorgen settings)
- Fixed: SyncStatePacket technically could lead to Undefined behavior where in very specific cases auth checks could be bypasses (none existed but future versions could have had that)
- Fixed: ServerMapPacket: ClientPackets had 0 Protection for the server.
There was a giant potential to flood the server with data and it would result in a memory leak.
ClientPackets are now discarded on the server.
Only ClientServerMapPackets were affected.
This mod has no additional files

