MSA-24-0001: Denial of service risk in file picker unzip functionality Description: Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality. Issue summary: Denial of service risk in file picker unzip functionality Severity/Risk: Serious Versions affected: 4.3 to 4.3.2, 4.2 to 4.2.5, 4.1 to 4.1.8 and earlier unsupported versions Versions fixed: 4.3.3, 4.2.6 and 4.1.9 Reported by: Sam Ezeh Issue no.: MDL-74641 CVE identifier: Pending Changes (master): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-74641
Created moodle tracking bugs for this issue: Affects: epel-all [bug 2264902] Affects: fedora-all [bug 2264901]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.