Gentoo FoundationGLSA-202312-02Minecraft Server: Remote Code Execution
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.127 Low
EPSS
Percentile
95.4%
Background
Minecraft Server is the official server for the sandbox video game.
Description
A vulnerability has been discovered in Minecraft Server. Please review the CVE identifier referenced below for details.
Impact
Vulnerable Minecraft Server versions include a bundled version of log4j which is vulnerable to remote code execution.
Workaround
There is no known workaround at this time.
Resolution
All Minecraft Server users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=games-server/minecraft-server-1.18.1"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | games-server/minecraft-server | < 1.18.1 | UNKNOWN |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.127 Low
EPSS
Percentile
95.4%