Heartbleed attacks against ARC

Roon Core Machine

ROCK on an HP mini pc

Networking Gear & Setup Details

Firewalla Gold Plus, Ubiquiti managed switch, wired connection.

Connected Audio Devices

USB to Schiit Bifrost

Number of Tracks in Library

Description of Issue

My firewall has detected several TLS Heartbleed attacks against my ROON ARC server. Can someone confirm that ROCK has received the necessary patches to make it immune to Heartbleed?

I would be very surprised if this is vulnerable, it is more likely to be 3rd party hackers looking for Heartbleed vulnerable servers as sadly they still exist.
ARC was released way after open SSL was already patched against this issue.

If you run your own firewall I generally recommend putting in Geographic based blocks to reduce the attack surface from counties you will never visit and have no reason to have visibility to your Room server.

3 Likes

This topic was automatically closed 36 hours after the last reply. New replies are no longer allowed.