CVE-2021-36395
06.03.2023, 21:15
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 𝑥 < 3.9.8 |
| moodle | moodle | 3.10.0 ≤ 𝑥 < 3.10.5 |
| moodle | moodle | 3.11.0 ≤ 𝑥 < 3.11.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-674 - Uncontrolled RecursionThe product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.