Wurst.Wiki

The Official Wurst Client Wiki

User Tools

Site Tools


log4shell

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
log4shell [2021/12/21 08:59] alexander01998log4shell [2023/01/22 00:18] (current) – [How to test if you are affected] fix typo alexander01998
Line 5: Line 5:
 Anyone can exploit this vulnerability by simply typing a special message into the Minecraft chat. Anyone can exploit this vulnerability by simply typing a special message into the Minecraft chat.
  
-Log4Shell is caused by certain versions of the Log4j library, which are included in Minecraft 1.7 1.18. Both Minecraft clients and Minecraft servers can be vulnerable to this exploit.+Log4Shell is caused by certain versions of the Log4j library, which are included in all Minecraft versions from 1.7 (released in 2014) to 1.18 (released in 2021). Both Minecraft clients and Minecraft servers can be vulnerable to this exploit.
  
 ===== Why care? ===== ===== Why care? =====
Line 16: Line 16:
  
 ^MC Version^Status^Patched by^How to fix^ ^MC Version^Status^Patched by^How to fix^
 +|Wurst MC 1.19+|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)|
 |Wurst MC 1.18.1|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)| |Wurst MC 1.18.1|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)|
 |Wurst MC 1.18|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10, [[update:Wurst 7.19]]|Update Wurst or reinstall Fabric.| |Wurst MC 1.18|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10, [[update:Wurst 7.19]]|Update Wurst or reinstall Fabric.|
Line 46: Line 47:
  
 ^MC Version^Status^Patched by^How to fix^ ^MC Version^Status^Patched by^How to fix^
 +|Mo Glass MC 1.19+|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)|
 |Mo Glass MC 1.18.1|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)| |Mo Glass MC 1.18.1|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)|
 |Mo Glass MC 1.18|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10, [[https://www.curseforge.com/minecraft/mc-mods/mo-glass/files/3568214|Mo Glass 1.6]]|Update Mo Glass or reinstall Fabric.| |Mo Glass MC 1.18|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10, [[https://www.curseforge.com/minecraft/mc-mods/mo-glass/files/3568214|Mo Glass 1.6]]|Update Mo Glass or reinstall Fabric.|
Line 59: Line 61:
  
 ^MC Version^Status^Patched by^How to fix^ ^MC Version^Status^Patched by^How to fix^
 +|WI Zoom MC 1.19+|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)|
 |WI Zoom MC 1.18.1|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)| |WI Zoom MC 1.18.1|**<color #22b14c>Not affected</color>**| |Relax, you're good. =)|
 |WI Zoom MC 1.18|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10|Reinstall Fabric.| |WI Zoom MC 1.18|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10|Reinstall Fabric.|
Line 66: Line 69:
 |WI Zoom MC 1.14.x|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10|Reinstall Fabric.| |WI Zoom MC 1.14.x|**<color #22b14c>Patched</color>**|Fabric Loader 0.12.10|Reinstall Fabric.|
 |WI Zoom MC 1.12.2|**<color #22b14c>Patched</color>**|Forge 1.12.2-14.23.5.2856|Reinstall Forge.| |WI Zoom MC 1.12.2|**<color #22b14c>Patched</color>**|Forge 1.12.2-14.23.5.2856|Reinstall Forge.|
 +
 +===== How to check your Wurst version =====
 +
 +{{:wurstlogo.webp|Wurst v7.19 MC1.18.1}}
 +
 +Your Wurst version is displayed in the top left corner of the screen.
  
 ===== How to check your Fabric Loader version ===== ===== How to check your Fabric Loader version =====
  
-**Note:** Fabric Loader v0.12.12 further improves the Log4Shell patch to cover cases published by CVE-2021-45046. This doesn't affect Minecraft by default, but it is theoretically possible that a mod would enable this issue.+**Note:** Fabric Loader 0.12.12 further improves the Log4Shell patch to cover cases published by CVE-2021-45046. This doesn't affect Minecraft by default, but it is theoretically possible that a mod would enable this issue.
  
 ==== Official Launcher ==== ==== Official Launcher ====
Line 75: Line 84:
 Click on the "Installations" tab and check what it says under your Fabric installation(s): Click on the "Installations" tab and check what it says under your Fabric installation(s):
  
-{{:log4shell-loader-version-official-launcher.webp|}}+{{:log4shell-loader-version-official-launcher.webp|Checking the Fabric Loader version in the official Minecraft launcher}}
  
 ==== MultiMC ==== ==== MultiMC ====
Line 83: Line 92:
 Click on "Edit Instance" and check what it says next to "Fabric Loader": Click on "Edit Instance" and check what it says next to "Fabric Loader":
  
-{{:log4shell-loader-version-multimc.webp|}}+{{:log4shell-loader-version-multimc.webp|Checking the Fabric Loader version in MultiMC}}
  
 ===== How to test if you are affected ===== ===== How to test if you are affected =====
Line 94: Line 103:
 Then check your log file (default: ''%appdata%/.minecraft/logs/latest.log''). Then check your log file (default: ''%appdata%/.minecraft/logs/latest.log'').
  
-If your Minecraft installation is **vulnerable**, you will see a long error like this in the logs:+If your Minecraft installation is **vulnerable**, you will see a long error like this in the logs:
 <file> <file>
 [17:32:25] [Client thread/INFO]: [CHAT] <Player671> ${jndi:ldap://127.0.0.1/a} [17:32:25] [Client thread/INFO]: [CHAT] <Player671> ${jndi:ldap://127.0.0.1/a}
log4shell.1640073597.txt.gz · Last modified: 2021/12/21 08:59 by alexander01998