PT-2022-5146 · Moodle+3 · Moodle+3

Nick Wojciechowski · Published 2020-11-08 · Updated 2024-03-06 · CVE-2022-35649

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified) GhostScript versions prior to 9.50

Description The issue occurs due to improper input validation when parsing PostScript code, resulting in a remote code execution risk. An omitted execution parameter allows for the exploitation of this issue, which may lead to the complete compromise of the vulnerable system. Successful exploitation can enable a remote attacker to execute arbitrary code.

Recommendations For Moodle, update GhostScript to version 9.50 or later to resolve the issue. As a temporary workaround, consider disabling the parsing of PostScript code until a patch is available. Restrict access to the PostScript parsing functionality to minimize the risk of exploitation.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

CWE-20

Related Identifiers

ALT-PU-2020-3235

ALT-PU-2022-2502

ALT-PU-2022-2553

BDU:2022-06403

BIT-MOODLE-2022-35649

CVE-2022-35649

GHSA-XP2F-9MX3-3C6P

Affected Products

Alt Linux

Ghostscript

Moodle

Red Os

References · 24

• https://bdu.fstec.ru/vul/2022-06403 · Security Note
• https://goslinux.fssp.gov.ru/2726972 · Security Note
• https://osv.dev/vulnerability/GHSA-xp2f-9mx3-3c6p · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-35649 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=436456 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/681526 · Security Note
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-75044 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35649 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-moodle-2022-35649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35649 · Security Note
• https://ubuntu.com/security/CVE-2022-35649 · Vendor Advisory