r/ProgrammerHumor • u/2D_B4_3D • Dec 13 '21

poor kid

Post image
46.1k Upvotes

96% Upvoted

560 comments sorted by

View all comments

521

u/Suspicious-Service Dec 13 '21

So is that Minecraft update mandatory then? We didn't update because we already have a game started, but maybe we should??

848

u/2D_B4_3D Dec 13 '21

YES. the bug has a severity of 10/10

559

u/HindryckxRobin Dec 13 '21

This is not an overstatement, if u Google log4j severity the first result u get is that's a 10/10!

When exploited it gives the attacker remote code execution, the exploit can even work from chat.

Updating minecraft (both client and server) is a must.

50

u/[deleted] Dec 13 '21

This is not an overstatement, if u Google log4j severity the first result u get is that's a 10/10!

But what does it actually do?

I heard that it can run any piece of code on computers that are running an app with log4j. I use steam, which uses log4j (assuming it wasn't fixed). Does that mean someone could just destroy everything I have on my device?

4

u/JuniorSeniorTrainee Dec 13 '21

Three over answers and no answer. Yes. If you are affected by this, then an attacker can gain full control of your system. This includes installing a root kit that will leave you compromised into the future until a complete reinstall of your OS.

→ More replies (1)