Closed renzhexigua closed 5 months ago
As M$ always did, I think if your service is well-known enough, your IP or domain will be added to black list, so i think this software doesn't suggest anyone put it to public network. Most correctly is start it on a NAS or Router in your own local area network. So i think it doesn't need any security or performance fix.
Describe the bug
There is a situation that a client can send packets to trigger a DoS attack. The RCA of this vulnerability is vlmcsd doesn't properly handle this
SIGPIPE
exception.Screenshots
Remediation/mitigation