CVE Vulnerabilities

CVE-2018-1043

Published: Jan 22, 2018 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 3.2.0 (including) 3.2.0 (including)
Moodle Moodle 3.2.1 (including) 3.2.1 (including)
Moodle Moodle 3.2.2 (including) 3.2.2 (including)
Moodle Moodle 3.2.3 (including) 3.2.3 (including)
Moodle Moodle 3.2.4 (including) 3.2.4 (including)
Moodle Moodle 3.2.5 (including) 3.2.5 (including)
Moodle Moodle 3.2.6 (including) 3.2.6 (including)
Moodle Moodle 3.3.0 (including) 3.3.0 (including)
Moodle Moodle 3.3.1 (including) 3.3.1 (including)
Moodle Moodle 3.3.2 (including) 3.3.2 (including)
Moodle Moodle 3.3.3 (including) 3.3.3 (including)
Moodle Moodle 3.4.0 (including) 3.4.0 (including)
Moodle Ubuntu artful *
Moodle Ubuntu bionic *
Moodle Ubuntu cosmic *
Moodle Ubuntu disco *
Moodle Ubuntu eoan *
Moodle Ubuntu trusty *
Moodle Ubuntu xenial *

References