CVE-2012-3398: Medium severity Moodle moodle vulnerability
Published Jul 23, 2012
·Updated
Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.
Affected Software
39 affected components
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Moodle moodle=1.9.14
Moodle moodle=1.9.15
Moodle moodle=1.9.16
Moodle moodle=1.9.17
Moodle moodle=1.9.18
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.0.5
Moodle moodle=2.0.6
Moodle moodle=2.0.7
Moodle moodle=2.0.8
Moodle moodle=2.0.9
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.1.6
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Event History
Jul 23, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3398?
CVE-2012-3398 is classified as a denial of service vulnerability.
2
How do I fix CVE-2012-3398?
To fix CVE-2012-3398, upgrade Moodle to version 1.9.19, 2.0.10, 2.1.7, or 2.2.4 or higher.
3
Who is affected by CVE-2012-3398?
CVE-2012-3398 affects Moodle versions earlier than 1.9.19, 2.0.10, 2.1.7, and 2.2.4.
4
What causes CVE-2012-3398?
CVE-2012-3398 is caused by an algorithmic complexity vulnerability in the advanced-search feature.
5
What are the consequences of CVE-2012-3398?
The consequences of CVE-2012-3398 include excessive CPU consumption leading to potential denial of service.