# Plex security issues DDOS

**URL:** <https://forums.plex.tv/t/plex-security-issues-ddos/687604>\
**Category:** General Discussions\
**Created:** [February 6, 2021, 10:39pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604 "2021-02-06T22:39:53Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![sgarret3](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/sgarret3/32/227261_2.png) [@sgarret3](https://forums.plex.tv/u/sgarret3)\
**Post date:** [February 6, 2021, 10:39pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/1 "2021-02-06T22:39:54Z")

</div>

Just came across this article on Gizmodo dated February 6, 2021, “Plex Media Has A Big Security Flaw.”

[Plex Media Has a Big Security Flaw](https://gizmodo.com/plex-media-has-a-big-security-flaw-1846205644/amp)

Seems to say Plex SSDP is being used to create “Plex DDOS” attacks due to the way Plex reaches out to the internet.

Uh, is this something I need to worry about? Do I need to configure my router in a special way to keep Plex within it’s boundaries? Is this a bug they are working to resolve? Or is this an over hyped non-issue?

---

<div class="post-metadata">

**Author:** ![pandas](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/pandas/32/191216_2.png) [@pandas](https://forums.plex.tv/u/pandas)\
**Post date:** [February 6, 2021, 10:42pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/2 "2021-02-06T22:42:37Z")

</div>

Just update to the latest version. There are already threads on this as you can imagine so do a search.

---

<div class="post-metadata">

**Author:** ![tom80H](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/tom80h/32/19753_2.png) [@tom80H](https://forums.plex.tv/u/tom80H)\
**Post date:** [February 6, 2021, 10:43pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/3 "2021-02-06T22:43:17Z")

</div>

You’re late:

1. Plex has already posted a link explaining the context/background/who’s impacted  
[Security: Regarding SSDP Reflection/Amplification DDoS](https://forums.plex.tv/t/security-regarding-ssdp-reflection-amplification-ddos/687162)
2. Plex has already released a fix for those servers even being exposed.  
[Plex Media Server - #396 by StSimm1](https://forums.plex.tv/t/plex-media-server/30447/396)

---

<div class="post-metadata">

**Author:** ![sgarret3](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/sgarret3/32/227261_2.png) [@sgarret3](https://forums.plex.tv/u/sgarret3)\
**Post date:** [February 6, 2021, 10:44pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/4 "2021-02-06T22:44:04Z")

</div>

Thanks, that makes me feel better. Gonna check for updates right now.

---

<div class="post-metadata">

**Author:** ![pandas](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/pandas/32/191216_2.png) [@pandas](https://forums.plex.tv/u/pandas)\
**Post date:** [February 6, 2021, 10:46pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/5 "2021-02-06T22:46:41Z")

</div>

Yeah. To their credit it was handled quickly and efficiently.

---

<div class="post-metadata">

**Author:** ![Fontara](https://avatars.discourse-cdn.com/v4/letter/f/bbce88/32.png) [@Fontara](https://forums.plex.tv/u/Fontara)\
**Post date:** [February 7, 2021, 12:27am UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/6 "2021-02-07T00:27:31Z")

</div>

Thank you for the links @tom80H . Kudos to the Plex team for getting this knocked out so quickly. This team clearly takes security seriously.

---

<div class="post-metadata">

**Author:** ![SE56](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/se56/32/222425_2.png) [@SE56](https://forums.plex.tv/u/SE56)\
**Post date:** [February 7, 2021, 12:34am UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/7 "2021-02-07T00:34:42Z")

</div>

The party is over, correct Tom…

This was a good wake up call to all, review your network settings and check your firewall is protecting your network. Consider a good VPN for everyday use outside Plex.

---

<div class="post-metadata">

**Author:** ![PhenomiteOfficial](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/phenomiteofficial/32/227411_2.png) [@PhenomiteOfficial](https://forums.plex.tv/u/PhenomiteOfficial)\
**Post date:** [February 8, 2021, 6:57am UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/8 "2021-02-08T06:57:10Z")

</div>

Glad to see it finally addressed.

I tried to get someone to fix this before releasing the issue on Github 16 months ago!

If only I knew the forums might have been the best place to raise it back then, to have to wait for Netscout to release their report instead.

Thanks to the devs for being smart and swift about it all.

---

<div class="post-metadata">

**Author:** ![tom80H](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/tom80h/32/19753_2.png) [@tom80H](https://forums.plex.tv/u/tom80H)\
**Post date:** [February 8, 2021, 7:20pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/9 "2021-02-08T19:20:08Z")

</div>

16 months is a long time given it appears so easy to tell Plex directly about some security issues.

> **[Reporting Security Issues | Plex Support](https://support.plex.tv/articles/reporting-security-issues/)**
>
> Plex Bug Bounty Policy Plex and its employees take security very seriously. To make our products as secure as they...

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\
**Post date:** [May 9, 2021, 7:20pm UTC](https://forums.plex.tv/t/plex-security-issues-ddos/687604/10 "2021-05-09T19:20:09Z")

</div>

Closed on May 9, 2021, 7:20pm UTC

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
