Java Log4j Vulnerability

There has been a vulnerability identified in a common Java login library Log4j. This vulnerability affects Java Minecraft servers and clients. You can find the official statement from Mojang on this vulnerability here. Their article also contains the steps you need to take to protect yourself.

Per the Mojang article, part of the required fix is to add certain JVM arguments to your startup command line. This can be done by following the instructions below.

  1. Log into your Minecraft control panel
  2. Click 'Startup Parameters' on the left-hand side menu
  3. Click the toggle next to the JVM argument you need to enable (If you do not see the JVM argument, restart your server and it should show up. If you still don't see it, please create a support ticket***)
  4. Restart your server

***If you are running 1.17+ you won't see the JVM argument because we already automatically add the correct one by default to the server's startup script. No need to contact us in this case.

Thankfully the Minecraft community is amazing, and most of the server versions have been patched, and do not require any fixes as long as you're running the latest builds. As of the writing of this article, the latest builds of the following versions have all been patched and do not require any fixes.

Bungeecord
Paper Waterfall
CraftBukkit 1.18.1
Fabric Loader 0.12.10+
Forge 1.18 (38.0.17)
Forge 1.17.1 (37.1.1)
Forge 1.16.5 (36.2.20)
Forge 1.15.2 (31.2.56)
Forge 1.14.4 (28.2.25)
Forge 1.13.2 (2.25.0.222)
Forge 1.12.2 (14.23.5.2857)
Paper 1.18.1
Paper 1.18
Paper 1.17.1
Paper 1.16.5
Paper 1.15.2
Paper 1.14.4
Paper 1.13.2
Paper 1.12.2
Paper 1.10.2
Spigot 1.18.1
Spigot 1.18
Spigot 1.17.1
Spigot 1.17
Spigot 1.16.5
Spigot 1.15.2
Spigot 1.14.4
Spigot 1.13.2
Spigot 1.12.2
Spigot 1.11.2
Spigot 1.10.2
Spigot 1.9.4
Spigot 1.8.8
Vanilla 1.7 to 1.18.1

If you are running anything else, it's best to proceed with caution and either update (recommended) or apply the fix mentioned by Mojang.

  • 29 Users Found This Useful
Was this answer helpful?

Related Articles

How to add a resource pack

  How to install resource packs on your server:1. Upload the resource pack on Dropbox. Copy...

How to setup BungeeCord

Note: For this tutorial, we will be using 4 servers to serve as an example of setting up a...

How to access your Minecraft server settings

Note: The server settings allow you to enable flying, turn on and off whitelisting, update the...

How to OP yourself

How to OP yourself:1. Log in to your BisectHosting control panel.2. Click Console.3. Run the...

How to enable and manage your Minecraft server whitelist

How to enable/disable whitelist:1. Log in to your BisectHosting control panel.2. Select File...