Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3398
HistoryJul 23, 2012 - 12:00 a.m.

CVE-2012-3398

2012-07-2300:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.005

Percentile

75.4%

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x
before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote
authenticated users to cause a denial of service (CPU consumption) by using
the advanced-search feature on a database activity that has many records.

Bugs

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.005

Percentile

75.4%