We have just released a critical security update for an issues that was recently discovered. The vulnerability is caused by a malformed compressed packet that can pin one or more threads at 100%, causing the server disruption.

We highly recommend to patch your SmartFoxServer instance(s) as soon as possible and, to this end, we have released backward compatible patches for older releases up to SFS2X 2.12.x, as well as SmartFoxServer 3.0.

Direct links to each update:

• SmartFoxServer 3:
  • SmartFoxServer 3.0.x_beta: update 3.0.4_beta
• SmartFoxServer 2X:
  • SmartFoxServer 2X 2.19.x: update 2.20.7
  • SmartFoxServer 2X 2.18.x: update 2.18.7
  • SmartFoxServer 2X 2.17.x: update 2.17.6
  • SmartFoxServer 2X 2.14.x: update 2.16.6
  • SmartFoxServer 2X 2.13.x: update 2.13.10
  • SmartFoxServer 2X 2.12.x: update 2.12.8

You can also find all updates here:

• Download SmartFoxServer 3 update
• Download SmartFoxServer 2X updates