Resource Management Errors The advisory has been revoked - it doesn't affect any version of package moodle  (opens in a new tab)


Threat Intelligence

EPSS
2.43% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1604-MOODLE-629823
  • published24 Nov 2014
  • disclosed24 Nov 2014

Introduced: 24 Nov 2014

CVE-2014-7847  (opens in a new tab)
CWE-399  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:16.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream moodle package and not the moodle package as distributed by Ubuntu.

iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service (resource consumption) by triggering the calculation of an estimated latitude and longitude for an IP address.