CVE Vulnerabilities

CVE-2018-1043

Published: Jan 22, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 3.2.0 (including) 3.2.0 (including)
Moodle Moodle 3.2.1 (including) 3.2.1 (including)
Moodle Moodle 3.2.2 (including) 3.2.2 (including)
Moodle Moodle 3.2.3 (including) 3.2.3 (including)
Moodle Moodle 3.2.4 (including) 3.2.4 (including)
Moodle Moodle 3.2.5 (including) 3.2.5 (including)
Moodle Moodle 3.2.6 (including) 3.2.6 (including)
Moodle Moodle 3.3.0 (including) 3.3.0 (including)
Moodle Moodle 3.3.1 (including) 3.3.1 (including)
Moodle Moodle 3.3.2 (including) 3.3.2 (including)
Moodle Moodle 3.3.3 (including) 3.3.3 (including)
Moodle Moodle 3.4.0 (including) 3.4.0 (including)
Moodle Ubuntu artful *
Moodle Ubuntu bionic *
Moodle Ubuntu cosmic *
Moodle Ubuntu disco *
Moodle Ubuntu eoan *
Moodle Ubuntu trusty *
Moodle Ubuntu xenial *

References