CVE-2012-3398

Published: Jul 23, 2012Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.

Affected (39)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

39 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 1.9.10
Moodle Moodle	Version 1.9.11
Moodle Moodle	Version 1.9.12
Moodle Moodle	Version 1.9.13
Moodle Moodle	Version 1.9.14
Moodle Moodle	Version 1.9.15
Moodle Moodle	Version 1.9.16
Moodle Moodle	Version 1.9.17
Moodle Moodle	Version 1.9.18
Moodle Moodle	Version 1.9.1
Moodle Moodle	Version 1.9.2
Moodle Moodle	Version 1.9.3
Moodle Moodle	Version 1.9.4
Moodle Moodle	Version 1.9.5
Moodle Moodle	Version 1.9.6
Moodle Moodle	Version 1.9.7
Moodle Moodle	Version 1.9.8
Moodle Moodle	Version 1.9.9
Moodle Moodle	Version 2.0.0
Moodle Moodle	Version 2.0.1
Moodle Moodle	Version 2.0.2
Moodle Moodle	Version 2.0.3
Moodle Moodle	Version 2.0.4
Moodle Moodle	Version 2.0.5
Moodle Moodle	Version 2.0.6
Moodle Moodle	Version 2.0.7
Moodle Moodle	Version 2.0.8
Moodle Moodle	Version 2.0.9
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5
Moodle Moodle	Version 2.1.6
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3