search

Tsuey / L4D2-Community-Update

Help us shape the potential future of L4D2 vanilla.
70 stars 23 forks source link

New exploit? #470

Closed lDrDooml closed 9 months ago

lDrDooml commented 10 months ago

Description

Hi, I would like to inform you that lately on my server when the following message appears: Invalid slipt packet length 8 the game freezes, however the players do not see it when they reconnect with the server the game simply freezes and then the players are kicked , I came to the conclusion that this is a DDoS attack related to the valve server queries, since before the protocols were changed this type of attack had exactly the same characteristics.

As for Invalid slipt packet length 8, it is the only message that appears, there is no more, when this message stops appearing on the console the game returns to normal.

Reproduction steps

No response

Additional files

No response

lDrDooml commented 10 months ago

researching a little more I found this: https://github.com/ValveSoftware/halflife/issues/2144

I clarify from now on that this vulnerability is present in all servers, whether official or third-party.

Kaze1027 commented 9 months ago

Someone has already used this vulnerability to create software to attack a large number of servers. ddos