CVE-2007-3112
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
Exploit likelihood
What each source reports
NVD Score used
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
CVE-2007-3112- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
CVE-2007-3112- Updated
- 2026-11-02
EUVDEUVD-2007-3104 No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
EUVD-2007-3104- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3wj7-jcqx-7j5f No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users...
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
GHSA-3wj7-jcqx-7j5f- Updated
- 2026-11-02
OSV No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
CVE-2007-3112- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3112 No score
graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumption) via a large value of the (1) graph_start or (2) graph_end parameter, different vectors than CVE-2007-3113.
- Record
DEBIAN-CVE-2007-3112- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10670-1 No score
cacti-1.2.18-1.2 on GA media
These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10670-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cactiDebian:12 |
before 0.8.6j-1.1 | 0.8.6j-1.1 |
cactiDebian:13 |
before 0.8.6j-1.1 | 0.8.6j-1.1 |
cactiDebian:14 |
before 0.8.6j-1.1 | 0.8.6j-1.1 |
cactiDebian:4.0 From an advisory covering 3 CVEs |
before 0.8.6i-3.6, plus listed versions 0.8.6i-30.8.6i-3.20.8.6i-3.30.8.6i-3.40.8.6i-3.5 |
0.8.6i-3.6 |
cactiDebian:5.0 From an advisory covering 3 CVEs |
before 0.8.7b-2.1+lenny1, plus listed versions 0.8.7b-2.1 |
0.8.7b-2.1+lenny1 |
cactiopenSUSE:Tumbleweed From an advisory covering 31 CVEs |
before 1.2.18-1.2 | 1.2.18-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3112 is a high vulnerability (CVSS 7.8) in The Cacti Group Cacti, published June 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.41%, the 84th percentile. Fixed in cacti 0.8.6j-1.1.
References
mdessus.free.fr?p=15
secunia.com/advisories/26872
bugzilla.redhat.com/show_bug.cgi?id=243592
mandriva.com/security/advisories?name=MDKSA-2007:184
archives.neohapsis.com/archives/fulldisclosure/2007-06/0074.html
bugs.cacti.net/view.php?id=955
Show 39 moreShow less
svn.cacti.net/cgi-bin/viewcvs.cgi/branches/BRANCH_0_8_6/cacti/graph_image.php?rev=3956&r1=3898&r2=3956
fedoranews.org/updates/FEDORA-2007-219.shtml
exchange.xforce.ibmcloud.com/vulnerabilities/34747
osvdb.org/37019
nvd.nist.gov/vuln/detail/CVE-2007-3112
github.com/advisories/GHSA-3wj7-jcqx-7j5f
security-tracker.debian.org/tracker/CVE-2007-3112
suse.com/security/cve/CVE-2006-6799